api
- RESTful, noun-based: `/api/v1/users/:id`, `/api/v1/reports/daily`. - Version in path (`/api/v1`); keep breaking changes behind new version.
Install / Use
npx skills add TUAN130294/vibecodekitInstalls into whichever agent you are using.
Cursor Rules
Cursor IDE rules (v2)
Quality Score
Category
Development & EngineeringSupported Platforms
Our assessment of api
api scores 58/100 on our quality scale, 2222nd of 2,717 Development & Engineering skills we index.
Its Cursor Rules is 1.8 KB long, well organised into 11 sections with 2 code examples: moderately detailed.
It has no GitHub stars yet, so there is no community track record; judge it on its content.
Maintenance, license and trust
- We could not determine when the repository was last updated.
- Our last check on 2026-09-27 found the source still online.
- No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
- Its trust signals score 68/100, with 3 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
api compared with similar skills
All 4 of these similar skills score higher than api; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| api (this skill)by TUAN130294 | 58 | 0 | — | Cursor Rules |
| Agent-Reachby Panniantong | 100 | 85.7k | 12d ago | CLAUDE.md |
| headroomby headroomlabs-ai | 100 | 73.9k | today | CLAUDE.md |
| ai-job-searchby MadsLorentzen | 100 | 44.1k | today | CLAUDE.md |
| claude-howtoby luongnv89 | 100 | 41.7k | 1d ago | CLAUDE.md |
Frequently asked questions
- How do I install api?
- Run
npx skills add TUAN130294/vibecodekit. The install tabs above show the steps for each supported agent. - Which AI agents does api work with?
- It is written for Cursor, as a Cursor Rules file. Other agents that read the same format can often use it too.
- Is api safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It declares no license and scores 68/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is api still maintained?
- We could not determine when the repository was last updated.
Skill content
View source on GitHubAPI Design Rules (REST)
Naming & Versioning
- RESTful, noun-based:
/api/v1/users/:id,/api/v1/reports/daily. - Version in path (
/api/v1); keep breaking changes behind new version.
Request/Response
- JSON only; UTF-8; snake_case in DB, camelCase in API responses.
- Envelope:
{ success: true, data }or{ success: false, code, message, details? }. - Pagination:
?offset=0&limit=50; includetotalwhen available.
Status Codes
- 200/201 success; 202 for async accepted.
- 400 validation, 401 unauthorized, 403 forbidden, 404 not found, 409 conflict, 422 semantic error, 429 rate limit, 500 fallback.
Validation
- Use Joi/Zod schemas per route; reject unknown fields.
- Sanitize inputs; enforce types and bounds; validate UUIDs/emails.
AuthN/AuthZ
- JWT bearer tokens; rotate secrets; short-lived access, refresh tokens optional.
- Role/permission checks in middleware; least privilege; audit key actions.
Rate Limiting & CORS
- Apply per-IP/per-user rate limits; handle 429 with
Retry-After. - CORS allow-list per environment; block wildcard origins in prod.
Error Responses
{ "success": false, "code": "INVALID_INPUT", "message": "email is required" }
- Never leak stack traces or internal ids in prod responses.
OpenAPI/Swagger
- Maintain up-to-date OpenAPI spec; serve at
/api/docs. - Annotate controllers/handlers; include examples and error cases.
Observability
- Log requestId, userId, path, duration, status; exclude sensitive data.
- Emit metrics for latency, errors, rate limits, cache hits.
Examples
router.post(
'/workflows/execute',
validate(bodySchema),
async (req, res, next) => {
try {
const result = await workflowService.execute(req.body);
return res.status(202).json({ success: true, data: result });
} catch (err) {
next(err);
}
}
);
Related Skills
Agent-Reach
85.7kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
headroom
73.9kCompress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.
ai-job-search
44.1kThe job search that runs on your machine. AI job application framework built on Claude Code: evaluate postings, tailor CVs, write cover letters, prep interviews. Fork it and own it.
claude-howto
41.7kA visual, example-driven guide to Claude Code — from basic concepts to advanced agents, with copy-paste templates that bring immediate value.
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.