Install
$ agentstack add skill-benknightdark-neo-skills-neo-dotnet-webapi ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
.NET Web API Expert Skill
Trigger On
- The user requests to create, debug, refactor, or review ASP.NET Core Web APIs.
- The project contains a
Controllersdirectory and inherits fromControllerBase. - The target framework is .NET 6.0 (LTS) and above.
- There is a need for API code modernization (e.g., migrating from Middleware exception handling to .NET 8+
IExceptionHandler).
Workflow
- Perceive (Architecture Awareness):
- Check
.csprojto identifyTargetFramework. - Analyze project structure to confirm whether it uses N-Tier architecture or Vertical Slice.
- Identify existing cross-cutting concern handling methods (filters, middleware).
- Reason (Planning Phase):
- Evaluate whether to introduce the "Problem Details" standard.
- Determine whether to use the .NET 8+ global exception handling mechanism.
- Choose an appropriate versioning strategy based on project scale.
- Act (Execution Phase):
- Write high-quality controllers compliant with
[ApiController]conventions. - Implement strongly-typed and immutable DTOs (prioritize
record). - Integrate dependency injection, prioritizing Primary Constructors (C# 12+).
- Validate (Standard Validation):
- Validate whether Action return types comply with
ActionResultspecifications. - Check NRT (Nullable Reference Types) safety.
- Ensure asynchronous operations correctly pass down
CancellationToken.
Feature Roadmap (.NET 6 - 10)
.NET 6 & 7 (Foundation)
- Controllers Architecture: Traditional controller patterns and attribute routing.
- Problem Details: Unified error response standards.
- Output Caching: High-performance server-side caching.
- Nullable Reference Types: Comprehensive null safety support.
.NET 8 & 9 (Productivity)
- IExceptionHandler: More elegant centralized exception handling.
- Antiforgery: Built-in anti-forgery support for Web APIs.
- Keyed Services: More flexible dependency injection options.
- HybridCache: Multi-level caching optimization.
.NET 10+ (Version-Specific Features)
- Extension Members for Controllers: Extending base controller functionality.
- Enhanced Serialization: JSON optimization for large payloads.
Coding Standards
- Strong Typing: Prioritize
ActionResultto improve Swagger support. - NRT Compliance: Strictly enforce Null safety to reduce runtime errors.
- Async Best Practices: Always accept and pass
CancellationToken. - Naming: Controller names must end with
Controller, async methods must end withAsync.
Deliver
- Version-Optimized Web API Code: Provide modernized controllers and configurations suitable for the target version.
- Architectural Insights: Provide refactoring suggestions for N-Tier or Clean Architecture.
- Security Recommendations: Provide security suggestions regarding Problem Details and exception handling.
Validate
- Ensure the code complies with C# 10+ modern syntax standards.
- Validate endpoints correctly return error formats compliant with RFC 7807.
- Confirm the code has no resource leaks in the tested environment (correct use of
usingand async).
Documentation
Official References
- ASP.NET Core Web API Overview
- Handle errors in ASP.NET Core web APIs (Problem Details)
- Controller action return types in ASP.NET Core web API
Internal References
- [Web API Coding Style and Naming Conventions](reference/coding-style.md)
- [Web API Anti-Patterns and Best Practices](reference/anti-patterns.md)
- [Web API Modern Patterns Guide](reference/patterns.md)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Benknightdark
- Source: Benknightdark/neo-skills
- License: MIT
- Homepage: https://neo-blog-iota.vercel.app/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.