Agent skill · software engineering · alirezarezvani
api-test-suite-builder
Use when asked to write API, integration or contract tests for REST endpoints. Builds the suite from the routes: happy paths, auth, validation errors and edge cases per endpoint.
Why this skill is useful
Adds executable scripts for scanning API routes and generating comprehensive test suites that aren't commonly available in public documentation.
What it needs
Requires httpx, pytest, supertest, vitest installed locally. About 4k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
API Test Suite Builder Tier: POWERFUL Category: Engineering Domain: Testing / API Quality --- Overview Scans API route definitions across frameworks (Next.js App Router, Express, FastAPI, Django REST) and auto-generates comprehensive test suites covering auth, input validation, error codes, pagination, file uploads, and rate limiting. Outputs ready-to-run test files for Vitest+Supertest (Node) or Pytest+httpx (Python). --- Core Capabilities Route detection — scan source files to extract all API endpoints Auth coverage — valid/invalid/expired tokens, missing auth header Input validation — missing fields, wrong types, boundary values, injection attempts Error code matrix — 400/401/403/404/422/500 for each route Pagination — first/last/empty/oversized pages File uploads — valid, oversized, wrong MIME type, empty Rate limiting — burst detection, per-user vs global limits --- When to Use New API added — generate test scaffold before writing implementation (TDD) Legacy API with no tests — scan and generate baseline coverage API contract review — verify existing tests match current route definitions Pre-release regression check — ensure all routes have at least smoke tests Security audit prep — generate adversarial input tests --- Route Detection Next.js App Router Express FastAPI Django REST Framework --- Test Generation Patterns Auth Test Matrix For every authenticated endpoint, generate: Test Case Expected Status ----------- ---------------- No Authorization header 401 Invalid token format 401 Valid token, wrong user role 403 Expired JWT token 401 Valid token, correct role 2xx Token from deleted user 401 Input Validation Matrix For every POST/PUT/PATCH endpoint with a request body: Test Case Expected Status ----------- ---------------- Empty body {} 400 or 422 Missing required fields (one at a time) 400 or 422 Wrong type (string where int expected) 400 or 422 Boundary: value at min-1 400 or 422 Boundary: value at min 2xx Boundary: value at max 2xx Boundary: value at max …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/api-test-suite-builder--997516