Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →notque/endpoint-validator
Deterministic API endpoint validation with pass/fail reporting.
Passed 14 of 18 test cases with the skill, and 8 of 18 without it.
and 4 more in the full report
7 fixed10 passed either way5 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
This benchmark measured an earlier version of the skill.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
Before parsing endpoints.json or validating routes, what repository file should be checked for base URL conventions or custom environment parameters?
| Checked | Without skill | With skill |
|---|---|---|
| Checks repository CLAUDE.md file prior to executing endpoint validation | Missed | Passed |
The instructions your model reads when the skill loads.
Deterministic HTTP endpoint validation: discover config, test each endpoint against expectations, report pass/fail with CI-compatible exit codes.
Load on demand when the signal matches.
| Signal | Reference | Content |
|---|---|---|
| Security header WARNs, HSTS/CSP/X-Frame | references/security-headers.md | Header checks, required values, remediation |
| Config errors, hardcoded IPs, timeouts | references/endpoint-config-preferred-patterns.md | Configuration failure modes and fixes |
| 401/403 failures, auth patterns | references/auth-endpoint-patterns.md | Bearer, API-key, cookie auth validation |
Read repository CLAUDE.md for base URL conventions or env var names.
Search for endpoint config in order: endpoints.json in project root,
tests/endpoints.json, inline specification from user. Prefer version-controlled
config over ad-hoc lists.
Config shape:
{
"base_url": "http://localhost:8000",
"endpoints": [
{"path": "/health", "expect_status": 200},
{"path": "/api/v1/users", "expect_key": "data", "timeout": 10},
{"path": "/api/v1/search?q=test", "max_time": 2.0}
]
}
Endpoint fields: path (required), expect_status (default 200),
expect_key (top-level JSON key), timeout (default 5s), max_time (SLOW
test cases passed, vs 8 / 18 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.