Xiaoyue Verified SkillsXiaoyue Labs
API quality · v1.0.0

API Contract Verifier

Analyze API documentation and perform safe real-request verification of documented contracts.

Release candidate
The workflow passed static publication checks, but download remains disabled until its license and final release manifest are approved.

The outcome

Compare documented behavior with observed responses without turning verification into load or penetration testing.

Permission map

FilesWrite

May read supplied documents and write sanitized verification records.

CommandsExecute

May run safe HTTP and document-inspection commands.

NetworkExecute

Sends bounded requests only to user-authorized API endpoints.

AccountsRead

May use an existing authorized credential channel without copying its secret.

BrowserRead

May inspect API documentation in a browser without changing account state.

External changesNone

Defaults to safe read-only requests and does not perform business mutations.

Environment & requirements

Agents

  • Codex
  • Claude Code

Platforms

  • macOS
  • Linux
  • Windows

Required tools

  • HTTP client
  • authorized API documentation

Data handling

Processes authorized API documents, test requests, and sanitized responses; tokens, cookies, personal data, and full production responses are not persisted by default.

Verification evidence

Passed repository structure, bilingual metadata, reference, script parsing, and public-artifact boundary checks; this static check is not represented as runtime verification on every platform.

Status
checked
Last checked
2026-09-23
Source revision
fac86e9d2646

Install & verify

Download is intentionally disabled.
The artifact candidate exists in the private release workspace, but the public license is still awaiting qualified review.