api-security-guard

Detect API security changes and validate touched endpoints across backend frameworks.

1|Updated Aug 16, 2025
One-click install
npx skills add https://github.com/RB-chrismandich/Manifest --skill api-security-guard-rb-chrismandich
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-security-guard
Source: https://github.com/RB-chrismandich/Manifest/tree/main/docs/templates/skills/api-security-guard
Command: npx skills add https://github.com/RB-chrismandich/Manifest --skill api-security-guard-rb-chrismandich

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

API changes commonly introduce security gaps; this skill provides lightweight, auto-triggered verification to ensure endpoints remain secure without blocking development.

Core Features & Use Cases

  • Lightweight, non-blocking checks on recent API changes
  • Validation of input handling, authentication, authorization, rate limiting, and CSRF protections
  • Works across Express, Django, FastAPI, Flask, Rails, and Go during PRs and commits

Quick Start

Run a lightweight API security validation on the latest changes to verify input validation, authentication, and authorization.

Frequently Asked Questions about api-security-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate API security checks on pull requests?

API security checks are auto-triggered on pull requests by detecting changes to endpoints and running lightweight validation for input handling, authentication, and authorization without blocking development.

Does API security validation work with FastAPI and Django frameworks?

API security validation works with FastAPI and Django, alongside Express, Flask, Rails, and Go frameworks, automatically applying checks to backend service code changes during commits and pull requests.

What security vulnerabilities are checked during API code changes?

Security checks during API code changes verify input validation, authentication, authorization, rate limiting, CSRF protection, and SQL injection prevention across modified endpoints to ensure comprehensive endpoint security.

Can I run non-blocking security validation on touched API endpoints?

You can run non-blocking security validation on touched API endpoints by triggering lightweight checks that detect recent security changes and verify protections without interrupting the development workflow.

What is the best way to verify CSRF protection and rate limiting on modified endpoints?

The best way to verify CSRF protection and rate limiting on modified endpoints is using auto-triggered lightweight validation that detects API security changes and validates these protections during pull requests.

When do I need automated API security validation for backend services?

You need automated API security validation for backend services when API changes commonly introduce security gaps, requiring lightweight verification to ensure endpoints remain secure during ongoing pull request development.