Can this skill help with API documentation?

The skill includes best practices for OpenAPI and Swagger, ensuring your API remains well-documented and easy for other developers to consume.

How does this skill help choose between REST and GraphQL?

It provides a specific decision tree that evaluates your project requirements—such as client diversity, data complexity, and type-safety needs—to recommend the most efficient protocol.

What versioning strategies are covered?

It offers implementation patterns for URI-based, Header-based, and Query-string versioning to help you plan for long-term API evolution without breaking changes.

Does it support security best practices?

Yes, it includes a dedicated security testing guide based on the OWASP API Top 10, covering authentication, authorization, and common vulnerability mitigation.

Is this skill specific to a single programming language?

While it offers specific optimizations for TypeScript via tRPC, the core architectural principles and patterns are language-agnostic and apply to any backend environment.

API Architecture & Design Patterns

Name: API Architecture & Design Patterns
Author: claudiodearaujo

byclaudiodearaujo

API 开发

Guides the design and implementation of modern API architectures using industry-standard principles for REST, GraphQL, and tRPC.

关于

This skill empowers developers to architect robust and scalable APIs by providing a strategic framework for decision-making in 2025. It moves beyond simple boilerplate to offer deep guidance on selecting the right protocol—whether REST, GraphQL, or tRPC—based on specific project needs. Users can leverage detailed patterns for resource naming, response formatting, authentication, and security auditing to ensure their APIs are production-ready. By enforcing best practices like rate limiting, consistent error handling, and proper versioning, it helps teams build maintainable interfaces that follow the OWASP API Top 10 security standards.

主要功能

Architecture decision trees for choosing between REST, GraphQL, and tRPC
Comprehensive security auditing based on OWASP API Top 10 principles
0 GitHub stars
Multiple versioning strategies including URI, Header, and Query-based methods
Standardized response structures including envelope patterns and pagination
Integration patterns for modern auth like JWT, OAuth, and Passkeys

使用场景

Determining the optimal API style for a new TypeScript-based fullstack project
Auditing existing API endpoints for naming anti-patterns and security vulnerabilities
Standardizing error formats and pagination across a microservices architecture

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter api-patterns

For use in Claude.ai and ChatGPT

Download Skill

GitHub

关于