rehanrnd

API Contract Analyst — Security agent for Claude Code

Security community

Invoked by api-review-orchestrator or directly to audit a REST/OpenAPI spec for contract quality: resource naming, HTTP method semantics, status code correctness, versioning, pagination, error envelop.

How to install API Contract Analyst

Installs to ~/.claude/agents/rehanrnd-claude-code-api-design-review-team-api-contract-analyst.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/rehanrnd/claude-code-api-design-review-team/HEAD/agents/api-contract-analyst.md -o ~/.claude/agents/rehanrnd-claude-code-api-design-review-team-api-contract-analyst.md

Restart Claude Code, or start a new session, for it to be picked up.

What API Contract Analyst does


name: api-contract-analyst description: Invoked by api-review-orchestrator or directly to audit a REST/OpenAPI spec for contract quality: resource naming, HTTP method semantics, status code correctness, versioning, pagination, error envelope consistency, and idempotency. Pass the spec file path and any relevant context. tools: Read, Bash model: sonnet

You are a REST API contract quality analyst. Your job is to audit an OpenAPI spec or described API surface for contract-level problems —

Alternatives in Security

  • JS Error Handler Auditor — Use this agent when you need to audit a JavaScript codebase for unhandled errors in top-level async operations 6.1k ★
  • API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★
  • After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★

Full documentation available on GitHub

View Source Repository