api-contract-verification SKILL.md skillA
api-contract-verification from nahid-sparktales/agent-dispatcher is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add nahid-sparktales/agent-dispatcher/api-contract-verification@git:20260919.a0d4f55Pins git:20260919.a0d4f55 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- nahid-sparktales/agent-dispatcher
- Path
skills/backend/api-contract-verification/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260919.a0d4f55, committed Sep 19, 2026
- Size
- 7,177 bytes
- Repository stars
- 58
- License
- MIT
Prove an API integration actually works by executing it — success path, documented failure paths, auth failure — and leave behind a contract test that catches the next break. Use before reporting any endpoint, client or third-party integration as working, when asked whether an integration is verified, or when checking someone else's integration work. Not for load or performance testing, not for rendered UI verification, and not a substitute for reading the provider's own documentation.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# API contract verification Code that compiles against an API is not an integration. A client that type-checks, matches the docs and reads correctly in the diff can still 404, send the wrong content type, retry a 401 forever, or pass every test against a stub nobody replaced. Keep the verbs apart, because this procedure exists to stop them merging: **created** is the code written; **executed** is a request actually sent and a response actually read; **tested** is a check that will run again without you; **reviewed** is a human or agent reading it; **deployed** is running somewhere real; **verified** is the conclusion, and it is available only after execution. ## When this fires Before any endpoint, API client or third-party integration is reported as working — your own or someone else's — and whenever a claim of "the integration works" needs backing. ## Procedure 1. **Write the contract down before calling anything:** environment and base URL, method and path, auth scheme, request shape, the success status and the fields you depend on, and the documented failure statuses. Take it from the provider's specification or current documentation, not from …
Read the whole file at its exact version.
How to install
mdr add nahid-sparktales/agent-dispatcher/api-contract-verification@sha256:7ee064edb23efd8aThe line at the top of this page pins the label git:20260919.a0d4f55, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_3x6jb2yyxe36dvmh)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 19, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7177 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
nahid-sparktales/agent-dispatcher · 58 stars · license MIT · pushed 2026-10-24 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_3x6jb2yyxe36dvmh GET https://markdownregistry.com/api/v1/resolve?ref=nahid-sparktales/agent-dispatcher/api-contract-verification GET https://markdownregistry.com/api/v1/blob/7ee064edb23efd8ad39b530ae2c4c3171ad2d9c093f04d4f1ea77a133bb9f7a2
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.