skills.rest
GoldenWing-360
GoldenWing-360OFFICIAL
Explore all skills by this author →
WebsiteGitHub

api-security

Detect common API vulnerabilities and suggest security fixes.

15|Updated May 12, 2026
Search Tags:#best practices#authorization#security#api#vulnerabilities#ssrf
One-click install
npx skills add https://github.com/GoldenWing-360/claude-security-skills --skill api-security-goldenwing-360
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-security
Source: https://github.com/GoldenWing-360/claude-security-skills/tree/main/api-security
Command: npx skills add https://github.com/GoldenWing-360/claude-security-skills --skill api-security-goldenwing-360

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security professionals and developers identify and mitigate common vulnerabilities in API designs and implementations.

Core Features & Use Cases

  • Vulnerability Detection: Guides users through checking for issues like BOLA, broken auth, SSRF, and misconfigurations.
  • Security Best Practice Implementation: Offers recommendations on rate limiting, input validation, and access controls.
  • Use Case: Audit your REST API endpoints to ensure they enforce proper authorization, protect against SSRF, and follow security standards before deployment.

Quick Start

Use the api-security skill to review your API codebase for common security flaws with an automated checklist.

Frequently Asked Questions about api-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my API for common security vulnerabilities?▼

To check API security vulnerabilities, review your endpoints for issues like BOLA, broken authentication, and SSRF. This process guides analysts through detecting misconfigurations and suggesting fixes during security audits or code reviews.

What are the best practices for securing REST APIs before deployment?▼

Best practices for securing REST APIs include enforcing proper authorization, applying rate limiting, and implementing strict input validation. Reviewing endpoints against these standards ensures protection against common flaws before production release.

How do I enforce proper authorization and access controls in an API?▼

To enforce proper authorization in an API, implement strict access controls and check for Broken Object Level Authorization (BOLA). This ensures users can only access resources they are explicitly permitted to handle.

Can I audit my API codebase for security flaws without external dependencies?▼

You can audit your API codebase for security flaws using only standard scripting to detect issues. No external dependencies are required to identify misconfigurations and enforce security best practices.

Why does my API fail pre-production security testing?▼

Your API fails pre-production security testing when it contains vulnerabilities like broken authentication or BOLA. Conducting a security audit identifies these misconfigurations and access control flaws before deployment.

Related Skills

Explore More Software Engineering Skills→
Synaptic-Labs-AISynaptic-Labs-AI
71

pact-prepare-research

Conduct structured research and documentation gathering for the PACT Prepare phase.

Official
Advanced
simotasimota
68

Sentinel

Detect and remediate codebase vulnerabilities including hardcoded secrets and SQL injection.

Community
Advanced
riftzen-bitriftzen-bit

springboot-security

Identify and remediate security misconfigurations in Java Spring Boot services.

Community
Advanced
SkobynSkobyn

hunt-sqli

Detect and exploit SQL injection vulnerabilities in web applications.

Community
Advanced