API QA — Security skill for Claude Code
Use when testing API endpoints for contract compliance, error handling, security, and performance.
How to install API QA
Installs to ~/.claude/skills/cmillstead-coding-team-api-qa/SKILL.md
mkdir -p ~/.claude/skills/cmillstead-coding-team-api-qa && curl -fsSL https://raw.githubusercontent.com/cmillstead/coding-team/HEAD/commands/api-qa.md -o ~/.claude/skills/cmillstead-coding-team-api-qa/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What API QA does
name: api-qa description: "Use when testing API endpoints for contract compliance, error handling, security, and performance. Covers 'test this API', 'API validation', 'check the endpoints', 'API contract testing'. Do NOT use for API documentation (/doc-write) or general security scanning (/scan-security)."
Read and follow `~/.claude/skills/coding-team/skills/api-qa/SKILL.md`, passing `$ARGUMENTS` through as the endpoint (or `all`).
Alternatives in Security
- Sanyuan Skills — Expert code review skill: SOLID, security, performance, error handling, boundary conditions 2.7k ★
- Bountyforge — All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T 399 ★
- AWS MCP Server — by alexei-led - Features multiple Python environment setup options with detailed code style guidelines, compre 182 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
TypeScript Senior Review
Claude Code plugin: senior TypeScript developer code reviewer. Reviews your TS code across 18 angles — quality
API Contract Review
API platform contract review. Invokes api-platform-reviewer to audit rate-limit design, OAuth scope hygiene, w
Review API Contracts
Audit API boundary code for contract drift: response envelope consistency, error response shapes, HTTP status-
Vibe Check
Production resilience audit for AI-generated code. Catches edge cases, scale failures, and missing error handl
Ke Autonomous
Orchestrate an approved project through product analysis, architecture, implementation, automated testing, QA,
Quality Gate
Orchestrate multi-stage validation pipeline with parallel test execution, security auditing, performance bench
Related Agents
API Contract Validator
API contract validation agent that ensures frontend API calls match backend endpoints, request/response types
QA API Tester
API test specialist for REST/GraphQL/gRPC-over-HTTP. Use to test endpoints against their contract (OpenAPI/sch
Critic Logic
Review code for logic bugs, unhandled edge cases, happy-path assumptions, input-validation gaps, and error-han