api-doctor
Check AI-generated API integration code for silent bugs before shipping. Use after writing or editing code that calls a third-party API SDK such as Resend or Supabase.
Profile →npx skills add qualtyco/api-doctor --skill api-doctor --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# api-doctor Run api-doctor after writing or editing code that calls a third-party API SDK (Resend, Supabase, and more). It checks integration code for hardcoded keys, missing webhook verification, unchecked `{ data, error }` Supabase mutations, missing Realtime filters, and similar issues that compile fine but fail silently in production. Provider rule catalogs are listed in the [api-doctor GitHub repo](https://github.com/qualtyco/api-doctor/tree/main/src/providers) under `src/providers/<name>/README.md`. ## Run a scan ```bash npx @api-doctor/cli@latest . --agent-model <your-model-id> ``` Replace `<your-model-id>` with the id of the model you are running as (e.g. `claude-opus-4-8`, `gpt-5.2-codex`, `gemini-3-pro`). This anonymously tells api-doctor which model produced the integration code being scanned; omit the flag if you don't know your model id. Findings are written to `.api-doctor/report.json`. Re-run after fixing issues until all `error` findings are gone. ## Read the report Open `.api-doctor/report.json`. Key fields: | Field | Meaning | | --- | --- | | `summary.score` | 0–100 health score | | `summary.errors` / `warnings` / `info` | Counts by severity | | `findings[]` | Ac
- Run a scan
- Read the report
- Fix findings — severity protocol
- error (always fix)
- warning (judgment required — ask before restructuring)
- info (suggestions only)
- Fix workflow
- Interpreting score vs. findings
- Optional: markdown handoff
npx @api-doctor/cli@latest . --agent-model <your-model-id> npx @api-doctor/cli@latest . --format markdown > issues.md
What does the api-doctor skill do?
Check AI-generated API integration code for silent bugs before shipping. Use after writing or editing code that calls a third-party API SDK such as Resend or Supabase.
How do I install it?
Run `npx skills add qualtyco/api-doctor --skill api-doctor --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From qualtyco/api-doctor, a repository with 66 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.