api-security-guard

Validate API security changes across Express, Django, FastAPI, Flask, Go, and Rails.

1|Updated Aug 16, 2025
One-click install
npx skills add https://github.com/ReefBytes/Manifest --skill api-security-guard
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-security-guard
Source: https://github.com/ReefBytes/Manifest/tree/main/docs/templates/skills/api-security-guard
Command: npx skills add https://github.com/ReefBytes/Manifest --skill api-security-guard

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

API changes can introduce security gaps when updating endpoints, auth flows, or validation logic, risking exposed data and insecure behavior.

Core Features & Use Cases

  • Lightweight, non-blocking security validations on API code changes across major frameworks.
  • Framework-agnostic coverage for Express, Django, FastAPI, Flask, Go, and Rails to validate endpoints, middleware, and input handling.
  • Inline feedback with remediation guidance and configurable checks.

Quick Start

Trigger a lightweight security check on your API code changes and receive inline remediation suggestions.

Frequently Asked Questions about api-security-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically check API code changes for security vulnerabilities?

Automatically check API code changes for security by running lightweight, non-blocking validations on endpoint handlers and middleware to prevent insecure endpoints from shipping. It inspects input validation, authentication, and authorization during code modifications.

Does the API security check work with FastAPI, Express, and Rails projects?

Yes, the API security check works across FastAPI, Express, Django, Flask, Go net/http, and Rails projects. It applies framework-appropriate patterns to inspect endpoints, middleware, and input validation during code modifications.

What types of API security vulnerabilities are caught during code review?

API security vulnerabilities caught during code review include missing input validation, authentication, authorization, rate limiting, CSRF, and SQL injection. It reports inline findings with specific remediation recommendations for each issue detected.

How do I get inline remediation suggestions for insecure API endpoints?

Get inline remediation suggestions for insecure API endpoints by triggering a lightweight security check on your API code changes. It validates authentication flows and validation logic, then reports findings with actionable guidance directly inline.

Can I use this to inspect middleware and input validation in Django and Flask?

Yes, you can inspect middleware and input validation in Django and Flask projects. The tool validates endpoint handlers and middleware using framework-appropriate patterns to detect insecure behavior when API changes are made.

Why does updating API endpoints and auth flows introduce security gaps?

Updating API endpoints and auth flows introduces security gaps when validation logic is altered or bypassed, risking exposed data. Running non-blocking checks on code modifications catches these insecure behaviors before they ship.