api-designer
An agent skill by Jeffallan, from Jeffallan/claude-skills. Tags: api, architecture, graphql, openapi, rest, web.
What it does
Use when designing REST or GraphQL APIs, creating OpenAPI specifications, or planning API architecture. Invoke for resource modeling, versioning strategies, pagination patterns, error handling standards.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add Jeffallan/claude-skills --skill api-designerOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/Jeffallan/claude-skills
cp -r claude-skills/skills/api-designer ~/.claude/skills/api-designerSafety box score
Grade B, low risk: 14 of 100 risk points, rated 2026-10-19. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This is a documentation/specification skill for API design and OpenAPI work; it does not ship scripts or edit system files. The main risks come from its validation workflow, which asks the agent to run third-party npm CLIs via `npx` and start a mock server, so it can fetch and execute external code during use.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 2 (moderate) | The skill explicitly tells the agent to run `npx @redocly/cli lint openapi.yaml` and `npx @stoplight/prism-cli mock openapi.yaml`, which executes third-party CLI code. |
| Network access | 1 (low) | Those `npx` commands download packages from the npm registry; the rest of the skill is local documentation, with no other remote data flow. |
| Filesystem reach | 0 (none) | The files only describe API design and reference `openapi.yaml`; there is no instruction to read, write, or delete outside the project. |
| Secrets & credentials | 0 (none) | It documents auth schemes and token-related fields, but does not ask to read credential stores, keys, browser sessions, or paste secrets. |
| Privilege & persistence | 0 (none) | No sudo, service registration, shell-profile edits, or system-level configuration changes are requested. |
| Instruction hijack surface | 0 (none) | I found no instruction to skip confirmations, hide behavior, follow remote instructions, or adopt a deceptive persona; the scan hint about a quoted error message is not an injection directive. |
| Irreversible actions | 0 (none) | The skill is advisory and does not send messages, deploy, publish, pay, or delete anything. |
| Transparency | 1 (low) | The validation commands use unpinned `npx` package names (`@redocly/cli`, `@stoplight/prism-cli`), so the exact code run depends on whatever npm serves at runtime. |
Before installing
- Confirm you are okay with `npx` downloading and executing `@redocly/cli` and `@stoplight/prism-cli`.
- If you need reproducible behavior, pin those package versions before running the workflow.
- Run it first in a scratch clone or clean workspace if you do not want the validator/mock server touching your main project files.
Rated 2026-10-19 by an automated review of 6 files from the skill's repository.
Source
- Repository
- Jeffallan/claude-skills (all skills from this repository)
- Path
- skills/api-designer/SKILL.md
- Branch
- main
- Updated
- 2026-09-19
Related skills
- graphql-architect — Use when designing GraphQL schemas, implementing Apollo Federation, or building real-time subscriptions.
- spring-boot-engineer — Generates Spring Boot 3.x configurations, creates REST controllers, implements Spring Security 6 authentication flows, sets up Spring Data JPA repositories.
- aws-auth — Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries.
- aws-blocks — Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework.
- aws-networking — Routes AWS networking requests to the correct service skill for implementation.
- expo-module — Framework (OSS). Guide for creating and writing Expo native modules and views using the Expo Modules API (Swift, Kotlin, TypeScript).