api-contract-validator SKILL.md skillA
api-contract-validator from pramoddutta/aitesterblueprint4x is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pramoddutta/aitesterblueprint4x/api-contract-validator@v1.0.0Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pramoddutta/aitesterblueprint4x
- Path
chapter_02_Prompt_Eng/prompt_templates/api_testing/api-contract-validator/SKILL.md- Versions recorded
- 1
- Latest version
- v1.0.0, committed Aug 11, 2026
- Size
- 2,195 bytes
- Repository stars
- 14
- License
- none declared
Compare observed HTTP API requests and responses with an OpenAPI or equivalent endpoint contract. Use when asked to validate a response against an HTTP specification, find API contract drift, check status codes or headers, or review captured request and response evidence. Produce a conformance report without designing general API coverage; use a message-specific validator for AsyncAPI and standalone JSON Schema artifacts.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# API Contract Validator Validate observed API behavior against an identified contract version. ## Inputs and evidence Require the contract, its version or revision, and a captured request/response or runner output. Record the method, path, status, media type, and evidence source. Mark missing material `Not provided`; never synthesize traffic. ## Workflow 1. Resolve the observed exchange to the exact contract operation and response. 2. Check documented status, headers, required fields, types, nullability, enums, formats, and additional-property rules. 3. Classify every check as `Conforms`, `Mismatch`, `Ambiguous`, or `Not verifiable`. 4. Cite the contract pointer and minimal redacted evidence for every finding. 5. Separate implementation drift from possible contract staleness; do not choose a source of truth without owner confirmation. 6. **HUMAN REVIEW GATE (mandatory).** Ask the API owner to confirm the contract version and findings before recommending a specification or implementation change. ## Output shape | Check | Contract pointer | Observed evidence | Result | Follow-up | |---|---|---|---|---| …
Read the whole file at its exact version.
How to install
mdr add pramoddutta/aitesterblueprint4x/api-contract-validator@sha256:8ea9b3537525806bThe line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_z5wnlxghy77obbhy)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 11, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2195 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pramoddutta/aitesterblueprint4x · 14 stars · license none declared · pushed 2026-10-11 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_z5wnlxghy77obbhy GET https://markdownregistry.com/api/v1/resolve?ref=pramoddutta/aitesterblueprint4x/api-contract-validator GET https://markdownregistry.com/api/v1/blob/8ea9b3537525806ba3ce33fd3a90dfe23a2d90a4b488a1ce653aad3422b694f3
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from pramoddutta/aitesterblueprint4x
Every file in pramoddutta/aitesterblueprint4x