cedricziel/openapi-sync
.claude/skills/openapi-sync/SKILL.md
Enforces OpenAPI spec discipline when working on REST API endpoints in this project. Triggers whenever adding, modifying, or removing HTTP routes, request/response types, or API handlers in the Rust web-ui crate (`crates/web-ui`). Reminds the agent to (1) update the committed `openapi.json` spec, (2) run `make dump-openapi` to re-export the spec from the running server, and (3) run `make generate-flutter-client` to regenerate the Dart/dio client in `app/packages/assistant_api/`. Also applies when changing route parameters, status codes, or authentication on existing endpoints.
$ install --global
skillsauthnpx skillsauth add cedricziel/assistant openapi-syncInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 15, 2026, 5:36 PM15.8s1 file scanned
SKILL.md
- name:
- openapi-sync
- description:
- Enforces OpenAPI spec discipline when working on REST API endpoints in this project. Triggers whenever adding, modifying, or removing HTTP routes, request/response types, or API handlers in the Rust web-ui crate (`crates/web-ui`). Reminds the agent to (1) update the committed `openapi.json` spec, (2) run `make dump-openapi` to re-export the spec from the running server, and (3) run `make generate-flutter-client` to regenerate the Dart/dio client in `app/packages/assistant_api/`. Also applies when changing route parameters, status codes, or authentication on existing endpoints.
OpenAPI Sync Discipline
Any change to the REST API must keep openapi.json and the generated Flutter client in sync. The Flutter app's app/packages/assistant_api/ package is generated code — never edit it manually.
Mandatory Steps After Any API Change
-
Make the server compile and run so the spec can be exported.
-
Re-export the OpenAPI spec:
make dump-openapiCalls the running server to produce a fresh
openapi.jsonat the repo root. -
Regenerate the Flutter Dart/dio client:
make generate-flutter-clientRequires
openapi-generator(brew install openapi-generator). -
Commit both
openapi.jsonand the regenerated files inapp/packages/assistant_api/together with the API change in the same commit (or a follow-up commit in the same PR).
What Counts as an API Change
- Adding, removing, or renaming a route
- Changing request body or query parameter types
- Changing response body types or status codes
- Adding or removing authentication/authorization on an endpoint
- Changing streaming vs. non-streaming behavior
Checklist Before Committing
- [ ]
openapi.jsonat repo root reflects the new/changed endpoint - [ ]
app/packages/assistant_api/has been regenerated viamake generate-flutter-client - [ ]
flutter analyzepasses (cd app && flutter analyze) - [ ] No manual edits inside
app/packages/assistant_api/
Related Skills
cedricziel/playwright-cli
tools
VerifiedTrustedCommunity
Browser automation via @playwright/mcp (Microsoft). Use this when the user wants to navigate websites, fill forms, take screenshots, scrape web content, test web apps, or run any multi-step browser workflow. Requires no display (headless mode supported).
4SKILL.mdUpdated Apr 12, 2026
cedricziel/hello-wasm
testing
VerifiedTrustedCommunity
A minimal example WASM skill that returns a greeting. Use to verify that the WASM execution tier is working correctly.
4SKILL.mdUpdated Apr 12, 2026
cedricziel/coding-agent
development
VerifiedTrustedCommunity
Run coding agents (Claude Code, Codex, OpenCode, or others) as background processes for programmatic control. Use when you need non-blocking execution, parallel agents, PR reviews, or long-running coding tasks. Prefer this over direct bash for any task that takes more than ~20 seconds.
4SKILL.mdUpdated Apr 12, 2026
cedricziel/claude-code-agent
tools
VerifiedTrustedCommunity
Run tasks on the local machine using Claude Code CLI as a background agent. Use this when the user wants to execute code, edit files, run shell commands, build projects, analyse repositories, or do any agentic work on the device — especially multi-step tasks that benefit from Claude Code's tool-use loop. Supports fire-and-forget async jobs (non-blocking, via the native process tool) as well as quick blocking one-shot tasks and follow-up questions in the same session.
4SKILL.mdUpdated Apr 12, 2026