Agent skills for Grok Build

Cross-cutting review of recent work — catches gaps between specialists.

CTO-level project status from git and codebase state.

Find and prove Broken Object Level Authorization (BOLA / API1:2023) in a REST or GraphQL API during an authorized assessment.

Configure this skill should be used when the user asks about "API contract",

Checks layer leakage in method signatures, missing DTOs, entity leakage to API, inconsistent error contracts.

API de Status de Pedido da Tray (recurso `/orders/statuses`).

API contract design for REST and GraphQL, covering resource shape, URL and header versioning with deprecation windows, RFC 9457 Problem…

Comprehensive API design patterns for REST, GraphQL, and gRPC.

API Design knowledge base. Provides REST constraints, Richardson Maturity Model, HTTP semantics, content negotiation, and GraphQL/gRPC…

Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight developers and stand the…

API Design Reviewer

Use when working on the backend API (packages/api).

Compare API specifications to detect breaking changes.

Write clear, developer-facing API documentation.

Procedures for creating comprehensive API documentation. === PROCEDURE: Endpoint Documentation === Authorization: Bearer your-api-key json…

Find and prove excessive data exposure (part of API3:2023) in an API during an authorized test — endpoints that return more object…

Detect and close Improper Inventory Management (API9:2023) for a REST or GraphQL API.

Automate API Labz tasks via Rube MCP (Composio).

API class validation rules for Scopy plugins.

Use API Resources with pagination and conditional fields; keep response shapes stable and cache-friendly

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against…