{"openapi":"3.1.0","info":{"title":"SkillScan","description":"Analyzes Claude Code skills for security risks before installation.\n\nNONE No risks found — safe to install
LOW Minor concerns — worth a quick review
MEDIUM Moderate risk — review before installing
HIGH Dangerous — do not install","version":"0.1.0"},"paths":{"/check/quick":{"get":{"summary":"Quick Scan by URL","description":"Static rules only — instant, deterministic. Paste a GitHub or SkillsMP URL.\n\n**Examples:**\n- `https://github.com/owner/repo`\n- `https://github.com/owner/repo/tree/main/skills/my-skill`\n- `https://github.com/owner/repo/blob/main/skills/my-skill/SKILL.md`\n- `https://raw.githubusercontent.com/owner/repo/main/SKILL.md`\n- `https://skillsmp.com/skills/vercel-vercel-skills-vercel-cli-skill-md`","operationId":"check_quick_get_check_quick_get","parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","title":"Url"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SafetyReport"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}},"post":{"summary":"Quick Scan (full control)","description":"Submit skill content directly as JSON. Static rules only — instant, deterministic.","operationId":"check_quick_post_check_quick_post","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SafetyReport"}}}}}}},"/check/deep":{"get":{"summary":"Deep Scan by URL","description":"Static rules + Claude AI analysis — catches subtle risks, dismisses false positives.\n\n**Examples:**\n- `https://github.com/owner/repo`\n- `https://github.com/owner/repo/tree/main/skills/my-skill`\n- `https://github.com/owner/repo/blob/main/skills/my-skill/SKILL.md`\n- `https://raw.githubusercontent.com/owner/repo/main/SKILL.md`\n- `https://skillsmp.com/skills/vercel-vercel-skills-vercel-cli-skill-md`","operationId":"check_deep_get_check_deep_get","parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","title":"Url"}}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SafetyReport"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}},"post":{"summary":"Deep Scan (full control)","description":"Submit skill content directly as JSON. Static rules + Claude AI analysis.","operationId":"check_deep_post_check_deep_post","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SafetyReport"}}}}}}},"/badge":{"get":{"summary":"Safety badge (SVG)","description":"Returns an SVG shield badge for the given skill URL.","operationId":"get_badge_badge_get","parameters":[{"name":"url","in":"query","required":true,"schema":{"type":"string","description":"Skill URL to scan","title":"Url"},"description":"Skill URL to scan"}],"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{}},"image/svg+xml":{}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/create-checkout":{"post":{"summary":"Create Stripe checkout session","description":"Returns a Stripe checkout URL. Only available when Stripe is configured.","operationId":"create_checkout_create_checkout_post","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{}}}}}}},"/health":{"get":{"summary":"Health","operationId":"health_health_get","responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"additionalProperties":true,"type":"object","title":"Response Health Health Get"}}}}}}}},"components":{"schemas":{"FalsePositive":{"properties":{"check":{"type":"string","title":"Check"},"evidence":{"type":"string","title":"Evidence"},"reason":{"type":"string","title":"Reason","default":""}},"type":"object","required":["check","evidence"],"title":"FalsePositive"},"Finding":{"properties":{"check":{"type":"string","title":"Check"},"mitre_technique":{"type":"string","title":"Mitre Technique"},"severity":{"type":"string","enum":["low","medium","high"],"title":"Severity"},"description":{"type":"string","title":"Description"},"evidence":{"type":"string","title":"Evidence"},"file":{"type":"string","title":"File"},"line":{"anyOf":[{"type":"integer"},{"type":"null"}],"title":"Line"}},"type":"object","required":["check","mitre_technique","severity","description","evidence","file"],"title":"Finding"},"HTTPValidationError":{"properties":{"detail":{"items":{"$ref":"#/components/schemas/ValidationError"},"type":"array","title":"Detail"}},"type":"object","title":"HTTPValidationError"},"SafetyReport":{"properties":{"verdict":{"type":"string","enum":["safe","suspicious","unsafe"],"title":"Verdict"},"risk_level":{"type":"string","enum":["none","low","medium","high"],"title":"Risk Level"},"recommendation":{"type":"string","enum":["INSTALL","REVIEW","CAUTION","BLOCK"],"title":"Recommendation"},"findings":{"items":{"$ref":"#/components/schemas/Finding"},"type":"array","title":"Findings"},"static_findings":{"anyOf":[{"items":{"$ref":"#/components/schemas/Finding"},"type":"array"},{"type":"null"}],"title":"Static Findings"},"llm_findings":{"anyOf":[{"items":{"$ref":"#/components/schemas/Finding"},"type":"array"},{"type":"null"}],"title":"Llm Findings"},"false_positives":{"anyOf":[{"items":{"$ref":"#/components/schemas/FalsePositive"},"type":"array"},{"type":"null"}],"title":"False Positives"},"summary":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Summary"},"checked_at":{"type":"string","format":"date-time","title":"Checked At"}},"type":"object","required":["verdict","risk_level","recommendation","findings","checked_at"],"title":"SafetyReport"},"ValidationError":{"properties":{"loc":{"items":{"anyOf":[{"type":"string"},{"type":"integer"}]},"type":"array","title":"Location"},"msg":{"type":"string","title":"Message"},"type":{"type":"string","title":"Error Type"},"input":{"title":"Input"},"ctx":{"type":"object","title":"Context"}},"type":"object","required":["loc","msg","type"],"title":"ValidationError"}}}}