API Contract Analyst — Security agent for Claude Code
Invoked by api-review-orchestrator or directly to audit a REST/OpenAPI spec for contract quality: resource naming, HTTP method semantics, status code correctness, versioning, pagination, error envelop.
How to install API Contract Analyst
Installs to ~/.claude/agents/rehanrnd-claude-code-api-design-review-team-api-contract-analyst.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/rehanrnd/claude-code-api-design-review-team/HEAD/agents/api-contract-analyst.md -o ~/.claude/agents/rehanrnd-claude-code-api-design-review-team-api-contract-analyst.md Restart Claude Code, or start a new session, for it to be picked up.
What API Contract Analyst does
name: api-contract-analyst description: Invoked by api-review-orchestrator or directly to audit a REST/OpenAPI spec for contract quality: resource naming, HTTP method semantics, status code correctness, versioning, pagination, error envelope consistency, and idempotency. Pass the spec file path and any relevant context. tools: Read, Bash model: sonnet
You are a REST API contract quality analyst. Your job is to audit an OpenAPI spec or described API surface for contract-level problems —
Alternatives in Security
- JS Error Handler Auditor — Use this agent when you need to audit a JavaScript codebase for unhandled errors in top-level async operations 6.1k ★
- API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★
- After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
API Security Analyst
Invoked by api-review-orchestrator or directly to audit a REST/OpenAPI spec and related implementation files f
API Review Orchestrator
Entry point for a full API design review. Invoke when the user asks to review, audit, assess, or give feedback
Defect Hunter
Use when one module needs a hunt for latent defects through exactly one lens (correctness, silent failure and
Convention Auditor
Audits codebase for convention violations including naming, logging, configuration, imports, and error handlin
Automation
Writes and runs e2e tests for the scenarios in test-cases.md classified as automatable, and records the rest a
SEO Ecommerce
E-commerce SEO specialist for the talwar-seo-audit skill. Audits product and category pages: Product/Offer sch
Related Skills
Rogue API Engineering Skill
Expert API design and delivery: resource modeling, versioning, consistent error envelopes, pagination/filterin
Pre Commit Review
Independent QA review of a working-tree diff before commit. Spawns a read-only reviewer agent to find correctn
Naming Crusade
Unleash parallel Naming Purist agents to enforce file naming conventions, variable semantics, and code clarity