AgentStack
SKILL verified MIT Self-run

Hyperwork Api Scaffold

skill-samrom3-claude-hyper-plugs-hyperwork-api-scaffold · by samrom3

API scaffolding — generate route/handler/schema/test skeletons for new endpoints, following existing project patterns.

No reviews yet
0 installs
4 views
0.0% view→install

Install

$ agentstack add skill-samrom3-claude-hyper-plugs-hyperwork-api-scaffold

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Hyperwork Api Scaffold? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

API Scaffold

Use: Tasks that create new API endpoints or services from scratch.

Approach

  1. Read existing endpoint files before writing anything — match patterns exactly.
  2. Identify: router/handler pattern, request validation library, response shape, error format.
  3. Scaffold in order: schema/types → handler → route registration → tests.
  4. Tests: cover happy path + at least one 4xx (bad input) + one 4xx (not found/auth).

Output Checklist

  • Request schema with validation (not raw req.body — use zod/pydantic/joi per repo).
  • Response type explicit — no any or dict.
  • Error responses follow existing error shape (read existing handlers for format).
  • Route registered in correct router/router group.
  • OpenAPI/docstring annotation if repo uses them.

Do / Don't

  • DO: grep for an existing similar endpoint and copy its structure — consistency > novelty.
  • DO: include auth middleware if all other routes have it.
  • DON'T: invent new patterns — match what's there.
  • DON'T: skip validation — unvalidated endpoints are a security boundary violation.
  • DON'T: hardcode env vars — use config injection pattern from repo.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.