API Governor Skill

Scope

Use this skill when you need consistent, actionable governance for HTTP APIs described in OpenAPI (YAML/JSON), including:

• Design linting (resource modeling, naming, pagination, errors)
• Security governance (auth requirements, scopes/roles, sensitive fields notes)
• Reliability governance (idempotency guidance, retry semantics)
• Observability governance (request IDs/correlation headers)
• Breaking-change detection (new spec vs baseline spec) + deprecation plan

This skill is optimized for internal APIs by default (pragmatic policy). A strict public-API preset is also provided.

Inputs expected

Provide at least one OpenAPI spec file (preferred):

• openapi.yaml, openapi.yml, openapi.json, swagger.yaml, etc.

Optional but strongly recommended for breaking-change checks:

• A baseline spec (e.g., from main) to compare against.