SKILL.md
$27
/swagger.json
/openapi.json
/api-docs
/docs
/.well-known/
/graphql
/gql
Version and product drift
/api/v1/
/api/v2/
/api/mobile/v1/
/legacy/
3. WHAT TO EXTRACT FROM DOCS
- optional and undocumented fields
- admin-only request examples
- deprecated endpoints that may still be active
- schema hints like
additionalProperties: true
- parameter names tied to filtering, sorting, IDs, roles, or tenancy
4. NEXT ROUTING
Finding
Next Skill
object IDs everywhere
JWT, OAuth, role claims
GraphQL or hidden fields
strong auth boundary but suspicious business flow