Use Yaak
mountain-loop/yaak
A skill your agent uses when the user mentions Yaak, a Yaak workspace, or the yaak command, or asks to call, hit, or smoke test HTTP/REST endpoints, save or organize API requests for reuse or manual…
Review Devolutions Gateway changes against authoritative external contracts.
Install External Contract Reviewer
$ npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install Devolutions/devolutions-gateway external-contract-reviewer --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/Devolutions/devolutions-gateway.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/external-contract-reviewer .claude/skills/external-contract-reviewer && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "external-contract-reviewer" agent skill from https://github.com/Devolutions/devolutions-gateway/tree/master/.agents/skills/external-contract-reviewer into .claude/skills/external-contract-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "external-contract-reviewer", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/Devolutions/devolutions-gateway/tree/master/.agents/skills/external-contract-reviewerType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install Devolutions/devolutions-gateway external-contract-reviewer --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Devolutions/devolutions-gateway.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/external-contract-reviewer .agents/skills/external-contract-reviewer && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "external-contract-reviewer" agent skill from https://github.com/Devolutions/devolutions-gateway/tree/master/.agents/skills/external-contract-reviewer into .agents/skills/external-contract-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "external-contract-reviewer", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install Devolutions/devolutions-gateway external-contract-reviewer --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Devolutions/devolutions-gateway.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/external-contract-reviewer .cursor/skills/external-contract-reviewer && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "external-contract-reviewer" agent skill from https://github.com/Devolutions/devolutions-gateway/tree/master/.agents/skills/external-contract-reviewer into .cursor/skills/external-contract-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "external-contract-reviewer", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/Devolutions/devolutions-gateway.git --path .agents/skills/external-contract-reviewer--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install Devolutions/devolutions-gateway external-contract-reviewer --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Devolutions/devolutions-gateway.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/external-contract-reviewer .gemini/skills/external-contract-reviewer && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "external-contract-reviewer" agent skill from https://github.com/Devolutions/devolutions-gateway/tree/master/.agents/skills/external-contract-reviewer into .gemini/skills/external-contract-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "external-contract-reviewer", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install Devolutions/devolutions-gateway external-contract-reviewerInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/Devolutions/devolutions-gateway.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/external-contract-reviewer .github/skills/external-contract-reviewer && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "external-contract-reviewer" agent skill from https://github.com/Devolutions/devolutions-gateway/tree/master/.agents/skills/external-contract-reviewer into .github/skills/external-contract-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "external-contract-reviewer", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install Devolutions/devolutions-gateway external-contract-reviewer --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Devolutions/devolutions-gateway.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/external-contract-reviewer .opencode/skills/external-contract-reviewer && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "external-contract-reviewer" agent skill from https://github.com/Devolutions/devolutions-gateway/tree/master/.agents/skills/external-contract-reviewer into .opencode/skills/external-contract-reviewer/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "external-contract-reviewer", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
external-contract-reviewer- GitHub stars
- 161
- Token cost
- ~665 tokens
- SKILL.md length
- 279 words
- Files
- 1
- Skills in repo
- 19
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Review Devolutions Gateway changes against authoritative external contracts.
- A diff may affect HTTP
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
- OpenAPI behavior
- WebSocket behavior
What it does
External Contract Reviewer is an agent skill from Devolutions/devolutions-gateway. Review Devolutions Gateway changes against authoritative external contracts. Use when a diff may affect HTTP or OpenAPI behavior, WebSocket behavior, relay or tunneling semantics, configuration schemas, or agent and platform protocols.
Its SKILL.md is about 670 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Backend & APIs, covering OpenAPI specifications and Realtime and WebSockets. It works with OpenAPI. The repository describes itself as: A blazing fast relay server adaptable to different protocols and desired levels of traffic inspection. The licence is Apache-2.0.
When your agent uses it
- A diff may affect HTTP
- OpenAPI behavior
- WebSocket behavior
- Tunneling semantics
Example prompts
- “/external-contract-reviewer”
What it can do on your machine
Read from SKILL.md and the folder at commit 81a3141. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
External Contract Reviewer loads about 665 tokens when it runs. Until then it costs about 66 tokens; SKILL.md has 279 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from Devolutions/devolutions-gateway at commit 81a3141, republished under its Apache-2.0 licence (© Devolutions). 279 words, ~665 tokens.
Download SKILL.mdSave it as
.claude/skills/external-contract-reviewer/SKILL.md (or your agent's skills folder).- name
- external-contract-reviewer
- description
- Review Devolutions Gateway changes against authoritative external contracts. Use when a diff may affect HTTP or OpenAPI behavior, WebSocket behavior, relay or tunneling semantics, configuration schemas, or agent and platform protocols.
External contract reviewer
First decide whether the change materially affects an externally visible contract. Do not force this review onto internal refactors, tests, tooling, or implementation details that preserve observable behavior.
Review applicable surfaces:
- HTTP routes, methods, authentication, headers, status codes, request and response bodies, and OpenAPI definitions.
- WebSocket handshakes, subprotocols, messages, framing, session behavior, closure, and errors.
- Relay and tunneling establishment, routing, framing, multiplexing, shutdown, and failure behavior.
- Configuration names, types, formats, defaults, validation, compatibility, and
config_schema.json. - Gateway-to-agent communication and operating-system or vendor platform protocols.
Identify the governing source before judging the implementation.
Prefer normative standards and vendor specifications for standardized behavior, and checked-in schemas or explicitly canonical repository documentation for Gateway-defined contracts.
Treat generated files and existing implementation behavior as evidence, not authority, unless the repository declares them canonical.
When Microsoft Open Specifications govern the changed behavior, use the windows-protocols skill if available; otherwise consult the specification directly.
When no authoritative source is available, state the evidence gap instead of inventing a requirement.
Map each contract-relevant change to its governing requirement and attempt to falsify compliance. Check versioning, capability negotiation, sequencing, endpoint roles, security requirements, compatibility guards, and error semantics when applicable. For encoded or structured data, check field order, widths, signedness, constants, reserved values, optional fields, lengths, bounds, encode/decode symmetry, and malformed-input handling. For schemas, compare implementation defaults and validation with the declared schema and verify that generated companions remain consistent.
Separate normative requirements from informative guidance, product-specific behavior, and inference. Cite the governing source precisely, including a section, URL, or repository path. Report only contract-relevant findings with a concrete location, observable impact, and actionable correction. Do not propose general architectural refactors unless conformance requires them.
© Devolutions, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .agents/skills/external-contract-reviewer of Devolutions/devolutions-gateway.
Open the folder on GitHubat commit 81a3141
Compare with similar skills
External Contract Reviewer next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| External Contract Reviewer this skillDevolutions/devolutions-gateway | 161 | — | ~665 | Automated safety check: Pass | Apache-2.0 | |
| Use Yaakmountain-loop/yaak | 19k | — | ~1.9k | Automated safety check: Pass | MIT | |
| Kui Frameworkabersheeran/kui | 297 | — | ~4.4k | Automated safety check: Pass | Apache-2.0 | |
| FastAPI ExpertJeffallan/claude-skills | 12k | — | ~1.8k | Automated safety check: Pass | MIT | |
| Fishjam Platformsoftware-mansion-labs/skills | 291 | — | ~1.7k | Automated safety check: Pass | MIT | |
| API ForgeEliasOulkadi/shokunin | 114 | — | ~2.9k | Automated safety check: Pass | MIT |
Similar skills
Kui Framework
abersheeran/kui
Guide for building web applications with the Kui framework. An agent skill from abersheeran/kui.
FastAPI Expert
Jeffallan/claude-skills
Builds async Python APIs with FastAPI and Pydantic V2, covering endpoints, JWT authentication, async SQLAlchemy, WebSockets and pytest checks against the OpenAPI docs.
Fishjam Platform
software-mansion-labs/skills
Fishjam platform fundamentals — domain model and auth shared by all SDKs.
API Forge
EliasOulkadi/shokunin
Design REST/GraphQL APIs with OpenAPI 3.1, error handling, pagination, rate limiting, webhooks, and idempotency.
API Protocol Security
zhaji2333/CkSKILLS
当目标存在REST/GraphQL/gRPC/WebSocket接口、Swagger/OpenAPI文档、调试端点（actuator/console）、旧版本API、内部接口、微服务网关，或需要测试HTTP走私、DoS、速率限制时调用。负责API全方法测试、BOLA越权、GraphQL深度攻击、协议层漏洞挖掘。
More from Devolutions/devolutions-gateway
All 19 skills in this repoTessl Skill Linting
Devolutions/devolutions-gateway
Review, lint, create, edit, refine, optimize, compress, or validate any agent skill in this repository, including any SKILL.md.
Build Agent Msi
Devolutions/devolutions-gateway
Build the Devolutions Agent Windows MSI installer locally. An agent skill from Devolutions/devolutions-gateway.
Changelog To Jira
Devolutions/devolutions-gateway
Creates missing DGW Jira tickets from CHANGELOG.md entries and updates the file with the new ticket links.
Commit And PR Conventions
Devolutions/devolutions-gateway
Follow the adopted commit and pull-request conventions. An agent skill from Devolutions/devolutions-gateway.
Prepare Release
Devolutions/devolutions-gateway
Prepares a Devolutions Gateway / Devolutions Agent release commit: bumps the version, generates and inserts the changelog, creates Jira tickets, generates the ToolBox changelog, and produces the…
Build Gateway Msi
Devolutions/devolutions-gateway
Build the Devolutions Gateway Windows MSI installer locally.
Related
Works with
Categories
Questions about External Contract Reviewer
What does External Contract Reviewer do?
Review Devolutions Gateway changes against authoritative external contracts. External Contract Reviewer is an agent skill from Devolutions/devolutions-gateway. Review Devolutions Gateway changes against authoritative external contracts.
When should I use External Contract Reviewer?
External Contract Reviewer fits situations like: A diff may affect HTTP; openAPI behavior; webSocket behavior; tunneling semantics.
How do I install External Contract Reviewer in Claude Code?
Run `npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a claude-code`. Or copy the skill folder (.agents/skills/external-contract-reviewer in Devolutions/devolutions-gateway) into .claude/skills/external-contract-reviewer in your project. Claude Code loads it when a task matches its description.
How do I install External Contract Reviewer in Codex?
Run `npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a codex`. Or copy the skill folder (.agents/skills/external-contract-reviewer in Devolutions/devolutions-gateway) into .agents/skills/external-contract-reviewer in your project. Codex loads it when a task matches its description.
Can I use External Contract Reviewer in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Devolutions/devolutions-gateway --skill external-contract-reviewer -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/external-contract-reviewer, .gemini/skills/external-contract-reviewer, .github/skills/external-contract-reviewer and .opencode/skills/external-contract-reviewer in your project.
What does External Contract Reviewer need to run?
SKILL.md names no scripts, command-line tools or credentials: External Contract Reviewer is instructions for the agent only.
Does External Contract Reviewer access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is External Contract Reviewer safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does External Contract Reviewer use?
External Contract Reviewer is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does External Contract Reviewer use?
About 665 tokens (SKILL.md is roughly 2.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to External Contract Reviewer?
Skills that share tags, products or a category with External Contract Reviewer: Use Yaak (mountain-loop/yaak, 19k stars), Kui Framework (abersheeran/kui, 297 stars), FastAPI Expert (Jeffallan/claude-skills, 12k stars) and Fishjam Platform (software-mansion-labs/skills, 291 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains External Contract Reviewer?
Devolutions (a GitHub organization) maintains it in Devolutions/devolutions-gateway, which has 161 GitHub stars. The repository holds 19 skills in this directory. The repository was last updated on October 6, 2026.
Source: Devolutions/devolutions-gateway on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.