api-expert

The api-expert skill is designed to serve as a high-level API architect specializing in the design, implementation, and security of modern APIs. It addresses the complexity and challenges of creating robust, scalable, and secure APIs by providing guidance aligned with industry standards like OpenAPI 3.1, OAuth2/JWT authentication, and OWASP API Security Top 10. By leveraging this skill, developers can ensure that API endpoints are consistent, compliant, and production-ready, reducing the risk of integration errors, security vulnerabilities, and scalability issues.

This skill encompasses comprehensive capabilities in RESTful API design, GraphQL, gRPC, WebSocket, and server-sent events. It provides expertise in resource modeling, HTTP methods, status codes, versioning strategies, pagination techniques, API documentation, and API gateway patterns. It emphasizes security by default, performance awareness, contract-driven development, and testing-first workflows, ensuring that APIs meet high standards of developer-friendliness and maintainability. The skill also enforces strict anti-hallucination protocols to prevent speculative implementation and ensure adherence to official specifications and best practices.

The api-expert skill is ideal for software architects, backend engineers, and API developers responsible for building secure and scalable services. It can be used when designing new APIs, implementing API gateways, enforcing authentication patterns, securing endpoints, or standardizing API documentation. Its guidance supports teams in maintaining high-quality, consistent API ecosystems that are resilient against common security threats and optimized for developer adoption and operational efficiency.