api-verification SKILL.md skillA
api-verification from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add devcodex-labs/devcodex/api-verification@git:20260730.6ee304aPins git:20260730.6ee304a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- devcodex-labs/devcodex
- Path
content/skills/api-verification/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260730.6ee304a, committed Jul 30, 2026
- Size
- 9,559 bytes
- Repository stars
- 432
- License
- AGPL-3.0
接口验证规范 — 双产物（.http + .cjs）生成 + 自动化执行脚本.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# API Verification Skill
## 职责
在 dev/fix 工作流涉及接口变更时，生成**归档级双产物**并执行验证：
- `.http` — 可执行请求示例（VS Code REST Client 格式）
- `.cjs` — 自动化执行脚本（Node.js）
> 说明：本 Skill 不负责“给前端或调用方看的轻量接口说明”。这类阅读型目标文档由 `dev-docs` 的 `light-api` / `frontend-api` 模式负责。
## 与 test-router 的关系
- `test-router` 负责识别本轮是否存在 API/HTTP 契约变更、归档级接口验证或回归接口探针需求。
- 一旦 TestRoute 判定需要 `api-verification`，本 Skill 的 `.http + .cjs` 双产物和自动化执行规则仍然强制适用。
- TestRoute 只记录验证路线，不替代本 Skill 的接口覆盖清单、断言脚本和执行结果。
## 触发时机
| 工作流 | 触发条件 |
|--------|---------|
| dev | 新增/修改 API 接口 |
| dev-optimization | 优化前（建立基线）和优化后（对比验证） |
| dev-scenario-test | 场景测试基于接口规范 |
| fix | 修复涉及接口行为变更 |
| test-router | TestRoute 判定存在对外 HTTP/API 契约变更、归档级接口验证或接口回归探针 |
## 双产物规范
### `.http` 文件（可执行请求示例）
```http
# <模块名> API 验证请求示例
@baseUrl = http://localhost:3000
@contentType = application/json
@token = replace-with-token-if-required
@language = zh-CN
@userName = test-user
@userEmail = test@example.com
### POST 创建用户
# @description 创建新用户账号
# @expects 201 + 返回体包含 data.id（人工检查提示）
POST {{baseUrl}}/api/users
Content-Type: {{contentType}}
Accept-Language: {{language}}
# 鉴权值默认可按用户要求直写；只有用户 / 项目要求可分享或脱敏时才保留占位变量
Authorization: Bearer {{token}}
{
"name": "{{userName}}",
…Read the whole file at its exact version.
How to install
mdr add devcodex-labs/devcodex/api-verification@sha256:dca28ceaa5cae41aThe line at the top of this page pins the label git:20260730.6ee304a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_7ekm6boo7wxdvkni)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jul 30, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9559 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_7ekm6boo7wxdvkni GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/api-verification GET https://markdownregistry.com/api/v1/blob/dca28ceaa5cae41ab1bf291a1b8104afa6d73ac3897a701a674a7a0db3380b78
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from devcodex-labs/devcodex
Every file in devcodex-labs/devcodex