rustidi

API Contract Audit — Security skill for Claude Code

Security community

Inventory every API endpoint that surfaces a field to clients BEFORE dropping, renaming, or semantically changing it.

How to install API Contract Audit

Installs to ~/.claude/skills/rustidi-ml-portfolio-api-contract-audit/SKILL.md

Terminal

mkdir -p ~/.claude/skills/rustidi-ml-portfolio-api-contract-audit && curl -fsSL https://raw.githubusercontent.com/rustidi/ml-portfolio/HEAD/skills/api-contract-audit.md -o ~/.claude/skills/rustidi-ml-portfolio-api-contract-audit/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What API Contract Audit does

name: api-contract-audit description: Inventory every API endpoint that surfaces a field to clients BEFORE dropping, renaming, or semantically changing it. Runs in the planning phase whenever a schema change touches a field the frontend reads, or drops/renames any field. Without it, a field quietly stays in the shape of only some endpoints and the client breaks on one page you forgot to check. triggers: ["drop column", "rename field", "schema change", "migration", "contract audit"] applies_t

Alternatives in Security

Pal — Multi-model AI integration — chat, debugging, code review, planning, security audit 11.3k ★
Migration Agent — Plans a token migration (format, tool, naming or tier): chains token-audit and naming-audit, builds the transf 194 ★
CodexQB — CodexQB is a Codex plugin for evidence-backed repo comprehension, planning, QA audit, and gated implementation 186 ★