sourjya

Review API Contracts — Security skill for Claude Code

Security community

Audit API boundary code for contract drift: response envelope consistency, error response shapes, HTTP status-code semantics, and frontend/backend type agreement.

How to install Review API Contracts

Installs to ~/.claude/commands/sourjya-kiro-rails-review-api-contracts.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/sourjya/kiro-rails/HEAD/.claude/commands/review-api-contracts.md -o ~/.claude/commands/sourjya-kiro-rails-review-api-contracts.md

Restart Claude Code, or start a new session, for it to be picked up.

What Review API Contracts does

description: "Audit API boundary code for contract drift: response envelope consistency, error response shapes, HTTP status-code semantics, and frontend/backend type agreement."

Before scanning, read `docs/decisions/` ADRs and any API design docs if they exist. Use documented contract decisions (intentional envelope exceptions, versioning strategy) to distinguish intentional design from accidental inconsistency.

Act as a principal-level API architect and backend engineer performing a

Alternatives in Security

Skill Audit — Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review 2.8k ★
Sanyuan Skills — Expert code review skill: SOLID, security, performance, error handling, boundary conditions 2.7k ★
Query Token Audit — Audit token security to detect scams, honeypots, and malicious contracts across BSC, Base, Solana, and Ethereu 483 ★