api-spectral

Description

API specification linting and security validation using Stoplight's Spectral with support for OpenAPI, AsyncAPI, and Arazzo specifications. Validates API definitions against security best practices, OWASP API Security Top 10, and custom organizational standards. Use when: (1) Validating OpenAPI/AsyncAPI specifications for security issues and design flaws, (2) Enforcing API design standards and governance policies across API portfolios, (3) Creating custom security rules for API specifications in CI/CD pipelines, (4) Detecting authentication, authorization, and data exposure issues in API definitions, (5) Ensuring API specifications comply with organizational security standards and regulatory requirements.

Tool Access

Full access

Inherits all available tools

Supporting Files

8 files

Additional assets for this skill

Tool Access

This skill inherits all available tools. When active, it can use any tool Claude has access to.

Supporting Assets

assets/ci-config-template.yml

assets/github-actions-template.yml

assets/rule-template.yaml

assets/spectral-owasp.yaml

references/EXAMPLE.md

references/WORKFLOW_CHECKLIST.md

references/custom_rules_guide.md

references/owasp_api_mappings.md

Links

GitHub Stats

0 forks

Updated 22 days ago

Related Skills

gitops-workflow

22.8K

Implement GitOps workflows with ArgoCD and Flux for automated, declarative Kubernetes deployments with continuous reconciliation. Use when implementing GitOps practices, automating Kubernetes deployments, or setting up declarative infrastructure management.

From kubernetes-operations

helm-chart-scaffolding

22.8K

Design, organize, and manage Helm charts for templating and packaging Kubernetes applications with reusable configurations. Use when creating Helm charts, packaging Kubernetes applications, or implementing templated deployments.

From kubernetes-operations

k8s-manifest-generator

22.8K

Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade Kubernetes configurations.

From kubernetes-operations