Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Analyzes OpenAPI and Swagger specifications to produce a structured audit report covering security gaps, schema quality, CRUD completeness, and automated test architecture. Outputs numerical risk scores across security, documentation, maintainability, and production readiness. Targeted at backend engineers and technical leads reviewing APIs before deployment.
Combines security auditing, schema validation, test planning, and risk scoring in a single structured pass rather than requiring separate tools or manual review for each concern.
When to use it
- Auditing an API spec before a production launch
- Identifying endpoints with missing authentication
- Generating a test plan from an existing API contract
- Reviewing a third-party API spec before integration
- Scoring documentation quality during a team API review
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: here's our OpenAPI JSON spec — give me a full audit (pastes spec)
- 1Parses the specification and counts endpoints, HTTP methods, and tag groups
- 2Checks each endpoint for declared security schemes and flags missing or inconsistent auth
- 3Reviews request and response schemas for weak typing, missing examples, and undocumented error codes
- 4Maps detected entities to CRUD operations and identifies incomplete lifecycle coverage
- 5Generates a test architecture plan per tag group with happy path, failure, and edge cases
Structured report with security analysis, schema findings, CRUD gap map, test case proposals, numerical risk scores, and a prioritized improvement roadmap