Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add s977043/river-review --skill openapi-contractgit clone --depth 1 https://github.com/s977043/river-reviewWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/s977043/river-review/openapi-contract)<a href="https://agentmods.dev/skills/s977043/river-review/openapi-contract"><img src="https://agentmods.dev/badge/skills/s977043/river-review/openapi-contract/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/s977043/river-review/openapi-contract"><img src="https://agentmods.dev/badge/skills/s977043/river-review/openapi-contract.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.01164 |
| Opus 5 | $0.00014 | $0.00582 |
| Sonnet 5 | $0.00006 | $0.00233 |
| Haiku 4.5 | $0.00003 | $0.00116 |
Grade A, and why
OpenAPI Contract Completeness scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Pattern declaration
Primary pattern: Reviewer Secondary patterns: Inversion Why: OpenAPI仕様の差分から契約不備・互換性事故・型の曖昧さをレビューし、クライアント側の破綻シナリオを逆照射する。
Goal / 目的
- OpenAPI（または同等の API 仕様）の差分から、契約不備による実装ブレ/互換性事故/運用不全を減らす。
Non-goals / 扱わないこと
- API の “正解設計” を断定しない（契約の一貫性・明確さ・互換性・運用可能性に限定）。
- 実装コードの最適化やライブラリ選定。
Pre-execution Gate / 実行前ゲート
このスキルは以下の条件がすべて満たされない限りNO_REVIEWを返す。
- 差分にOpenAPI/Swagger仕様ファイルまたはAPI設計ドキュメントが含まれている
- inputContextにdiffが含まれている
ゲート不成立時の出力: NO_REVIEW: openapi-contract — OpenAPI/API仕様に関する差分がない
False-positive guards / 抑制条件
- 仕様の不足が差分外で既に合意済み（別ドキュメント参照）で、参照が明確な場合は重複指摘しない。
Rule / ルール
- 先頭に要約を 1 行出す（追加/変更された endpoint と互換性の要点）。
- 指摘は最大 8 件まで。互換性破壊/曖昧な型/エラーモデル不統一/認可抜けを優先。
- 可能な限り “追記案（仕様に貼れる形）” を付ける。
Checklist / 観点チェックリスト
- 型とバリデーション
required/nullable/oneOf/anyOf/formatが曖昧でないか。- request/response の例（example）が現実的で、破綻していないか。
- エラー契約
- 4xx/5xx の使い分け、エラー構造（code/message/detail/requestId 等）が一貫しているか。
- 再試行可能性（retryable）や rate limit の扱いが読み取れるか。
- 認証/認可
securitySchemesと各 operation のsecurityが整合しているか。- 権限境界（誰が何をできるか）が仕様に落ちているか（役割/スコープ）。
- 互換性
- 破壊的変更（削除/rename/型変更）がある場合、バージョニングや移行方針があるか。
- pagination / sorting / filtering の契約が曖昧でないか。
- 運用性
requestId/相関ID 等、障害調査に必要な情報が契約に反映されているか。
Output / 出力フォーマット
すべて日本語。<file>:<line>: <message> 形式で出力する。
- 先頭に要約を 1 行:
(summary):1: <追加/変更endpointと互換性の要点> - 以降は指摘（最大 8 件）:
<message>に[severity=critical|major|minor|info]を含める。- “追記案” を 1 行付ける（例:
エラーレスポンスは { code, message, requestId } を共通化）。
評価指標（Evaluation）
- 合格基準: 差分に紐づく契約不備が優先度付きで指摘され、仕様に貼れる追記案がある。
- 不合格基準: 仕様と無関係な一般論、根拠のない断定、指摘の洪水。
人間に返す条件（Human Handoff）
- 互換性破壊の判断やバージョニング方針が未合意の場合は人間レビューへ返す。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 90 lines · 28 tokens per session scan A 9b988a8fc105
OpenAPI Contract Completeness is a skill published in the GitHub repository s977043/river-review (3 stars, last pushed today), licensed MIT. It adds 28 tokens to every session and 1,164 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
api-integrations
Expose external APIs to Falcon Foundry via OpenAPI specs. TRIGGER when user asks to "create an API integration", "adapt an OpenAPI spec for Foundry", "expose an API to workflows", "connect to a third-party API", or runs foundry api-integrations create. Also trigger when user has an OpenAPI/Swagger spec and wants it…
schema-authority
Single source of truth authority — define once in Pydantic / SQLModel / OpenAPI / Protobuf, generate TypeScript types, validators, docs, mocks, and contract tests from that canonical definition; schema registry patterns, spec-first API design, consumer-driven contract testing, and database-model alignment.
Contract-First Testing
Contract-first testing approach using Pact, Spring Cloud Contract, or Dredd for ensuring API consumer-provider compatibility.
nodejs-backend
Node.js backend patterns: framework selection, layered architecture, TypeScript, validation, error handling, security, production deployment. Use when building REST APIs, Express/Fastify servers, microservices, or server-side TypeScript.
api-documenter-v2
This public intake copy packages plugins/antigravity-awesome-skills/skills/api-documenter from https://github.com/sickn33/antigravity-awesome-skills into the native Omni Skills editorial shape without hiding its origin.
api-design-patterns
Design robust APIs with RESTful patterns, GraphQL schemas, versioning strategies, and error handling conventions. Supports OpenAPI/Swagger documentation and SDK generation patterns. Triggers on API design, schema definition, endpoint architecture, or developer experience requests.