API Development

Trust Score 88/100

Guidelines and patterns for building robust REST APIs: correct HTTP status codes, RFC 7807 error responses, validation, sanitization, rate limiting, and central

triggers:api developmenterror handlerrfc 7807validationrate limitstatus codescentralized error

GitHub SKILL.md

What it does

This skill provides a concise, production-ready checklist and guidance for implementing REST APIs with correct status codes, RFC 7807-compliant error payloads, input validation and sanitization, rate limiting, request correlation IDs, and centralized error handling. It includes example code and middleware patterns to standardize API behavior.

When to use it

Apply this skill when creating or reviewing API routes, building server-side handlers, adding validation and error handling, or hardening endpoints against abuse. Useful during code reviews, API design, and production readiness checks.

What's included

Scripts: none in the repo for this skill, but rich examples and code snippets are embedded in the SKILL.md body
References: none listed, but links to RFC 7807 and relevant docs are provided
Instructions: practical examples for status code selection, RFC 7807 Problem Details structures, centralized error handler middleware, Zod schema validation patterns, sanitization, and rate limiting setup

Compatible agents

Applicable to Claude-based authors and developer-assistant agents (Claude Opus / Claude Code) and any agent that helps produce server-side code or audits API implementations.

Audit Summary

A well-written REST API development guidelines skill covering HTTP status codes, RFC 7807 error responses, input validation, rate limiting, and anti-patterns. No bundled scripts — it's a pure reference skill with quality code examples and clear good/bad comparisons.

Watch Out

Reference-only skill with no executable scripts
Uses Express rate-limit examples alongside Next.js handlers — mixed stack context

Notes

Clean reference skill. No security concerns. Good coverage of API best practices with practical TypeScript examples. Architecture could benefit from scripts/ or references/ directories for deeper examples.

Information

Repository: claude-code-handbook
Stars: 104

Trust Score

Overall88

Security100

Code Quality82

Architecture68

Usefulness72

Related Skills

TradeOS

Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r

ezBookkeeping API Tools

Command-line API tools for ezBookkeeping: record and query transactions, retrieve accounts/categories/tags, and fetch exchange rates for self-hosted personal fi

Java 25 & Spring Boot 4 Code Reviewer

Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an

ArcKit — French Public Procurement (fr-marche-public)

Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d

Vibe Security Auditor

Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.

Speak Security Basics

Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy

RemoFirst — Core Workflow A

Onboarding workflow for RemoFirst: create employee records, upload compliance documents, and track country-specific onboarding status.

Visualization Best Practices

Provides step-by-step guidance and production-ready patterns for creating clear, accurate, and effective data visualizations in analytics workflows.

Back to Skills