NightVision API Discovery

Use this skill when helping users generate OpenAPI specifications from their source code using nightvision swagger extract. API Discovery performs static analysis — no running application or compilation needed — and annotates the spec with source file paths and line numbers (Code Traceback) so that vulnerabilities found during DAST scans trace back to exact code locations.

Agent workflow

When a user asks to extract or document their API:

1. Check prerequisites — verify the NightVision CLI is available (nightvision --help)
2. Examine the repo — identify the backend language and web framework to determine the --lang flag and whether the framework is supported (see references/framework-support.md)
3. Run extraction — execute nightvision swagger extract with the appropriate flags. On success, the CLI prints "Swagger file extracted successfully." and writes the spec to the output path (default: openapi-spec.yml)
4. Review the output — read the generated spec to check completeness. Handle unresolved variables if nv.config was created alongside the spec
5. Compare coverage — if the user has an existing spec, run nightvision swagger diff to show what was discovered vs. what was documented
6. Upload to target — attach the spec to a NightVision target for scanning