What protocols does the API Reviewer support?

The skill supports a wide range of protocols including OpenAPI, AsyncAPI, GraphQL, gRPC, WebSockets, SSE, Webhooks, and even SDK/IPC-CLI formats.

When is the best time to use this skill?

It is best used after the PRD (Product Requirements Document) is finalized but before starting High-Level Design (HLD) or implementation to catch design flaws early.

Can it check for breaking changes?

Yes, Phase 4 of the review process specifically checks for versioning strategies, breaking changes, and the presence of necessary migration plans.

How does the P0/P1/P2 gate system work?

It uses strict exit criteria: P0 (Blocking) and P1 (Critical) issues must be zero for a contract to pass. P2 (Suggestions) are limited to two or fewer for a successful 'Readiness Certificate'.

Does this skill automatically modify my API files?

No. To maintain the integrity of the 'Single Source of Truth', the skill identifies issues and provides evidence-based recommendations rather than rewriting the contract files directly.

API Contract Reviewer

Name: API Contract Reviewer
Author: TestAny-io

byTestAny-io

•

API Development

Performs professional API contract design reviews to ensure consistency, compatibility, and readiness across multiple protocols.

About

API Contract Reviewer acts as a professional gatekeeper for your API ecosystem, performing rigorous design reviews for OpenAPI, GraphQL, gRPC, and more. It bridges the gap between Product Requirements (PRD) and implementation by verifying that contracts are complete, secure, and backwards-compatible while preventing redundant development. By enforcing strict exit criteria through a multi-gate process, it ensures that your API definitions serve as a reliable single source of truth before any code is written, identifying breaking changes, security risks, and architectural drift early in the lifecycle.

Key Features

Multi-protocol support for OpenAPI, GraphQL, gRPC, AsyncAPI, WebSockets, and more
Automated drift detection to ensure contracts accurately reflect PRD requirements
Comprehensive 'Readiness Certificates' and detailed issue reports with evidence-based feedback
Strict gate-based review process with P0/P1/P2 severity levels for blocking issues
Compatibility and versioning strategy verification to prevent breaking changes
6 GitHub stars

Use Cases

Ensuring consistency and security across multiple protocols (REST/WebSocket) within a single project
Reviewing an OpenAPI specification against a PRD before starting backend development
Validating compatibility and migration plans for breaking changes in an existing gRPC service

About

Key Features

Multi-protocol support for OpenAPI, GraphQL, gRPC, AsyncAPI, WebSockets, and more
Automated drift detection to ensure contracts accurately reflect PRD requirements
Comprehensive 'Readiness Certificates' and detailed issue reports with evidence-based feedback
Strict gate-based review process with P0/P1/P2 severity levels for blocking issues
Compatibility and versioning strategy verification to prevent breaking changes
6 GitHub stars

Use Cases

Ensuring consistency and security across multiple protocols (REST/WebSocket) within a single project
Reviewing an OpenAPI specification against a PRD before starting backend development
Validating compatibility and migration plans for breaking changes in an existing gRPC service