API Tester /api-tester

About this skill

API Tester turns your OpenAPI spec into a real test suite: contract tests for every endpoint, fuzzed edge cases for every parameter, and latency-budget checks so slow endpoints get caught before your users notice.

Failures come with reproduction steps — the exact request, the expected versus actual response, and a curl command to replay it. No more 'works on my machine' mysteries; the report is the repro.

It runs read-only by default and only performs writes against endpoints you explicitly allowlist, so it's safe to point at staging. Teams run it in CI on every spec change and nightly against production for drift detection.

Inputs

• openapi_spec · string
  URL or path to the OpenAPI 3.x spec.
• base_url · string
  Target environment base URL.
• write_endpoints · array
  Endpoints allowed to receive mutating requests.

Outputs

• results · array
  Per-test results with status and timing.
• failures · array
  Failures with exact reproduction steps.
• coverage · string
  Endpoint and parameter coverage summary.

Permissions

Deny-by-default: the skill can only use what it declares.

Manifest

{
  "spec": "agentskills.io/v1",
  "name": "api-tester",
  "version": "2.2.1",
  "description": "Generates contract tests from an OpenAPI spec, fuzzes edge cases, checks latency budgets, and reports failures with reproduction steps.",
  "inputs": {
    "openapi_spec": {"type": "string", "description": "URL or path to the OpenAPI 3.x spec.", "required": true},
    "base_url": {"type": "string", "description": "Target environment base URL.", "required": true},
    "write_endpoints": {"type": "array", "description": "Endpoints allowed to receive mutating requests.", "required": false}
  },
  "outputs": {
    "results": {"type": "array", "description": "Per-test results with status and timing."},
    "failures": {"type": "array", "description": "Failures with exact reproduction steps."},
    "coverage": {"type": "string", "description": "Endpoint and parameter coverage summary."}
  },
  "permissions": ["net:http", "fs:read"],
  "author": "Endpoint Co.",
  "category": "Development"
}

Changelog