api-security-guard

Monitor API code changes and validate security best practices across web frameworks.

1|Updated Aug 16, 2025
One-click install
npx skills add https://github.com/ReefBytes-Owner/Manifest --skill api-security-guard-reefbytes-owner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-security-guard
Source: https://github.com/ReefBytes-Owner/Manifest/tree/main/docs/templates/skills/api-security-guard
Command: npx skills add https://github.com/ReefBytes-Owner/Manifest --skill api-security-guard-reefbytes-owner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams automatically validate API security practices whenever API-related code changes are detected, reducing the risk of insecure endpoints making it into production while keeping developer workflow unblocked.

Core Features & Use Cases

  • Auto-trigger when detecting modifications to API endpoints, request handlers, authentication middleware, or input validation code, without blocking user flow.
  • Lightweight, non-blocking checks for input validation, authentication, authorization, rate limiting, CSRF protection, and SQL injection risk.
  • Inline feedback with actionable recommendations to remediate issues during development.

Quick Start

Enable the api-security-guard skill in your configuration to begin auto-triggering on API code changes.

Frequently Asked Questions about api-security-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically validate API security best practices without blocking my development workflow?

This skill monitors API-related code changes to automatically validate security best practices, applying non-blocking checks for input validation and authorization to keep your development workflow unblocked.

Does this API security monitoring tool support both Express and Django frameworks?

Yes, this API security monitoring tool detects code changes across major web frameworks including Express, Django, FastAPI, Flask, Go net/http, and Rails.

What specific security vulnerabilities are checked during API endpoint code change detection?

The security checks performed cover input validation, authentication, authorization, rate limiting, CSRF protection, and SQL injection risks.

How do I set up automatic security checks for API request handlers and middleware?

Simply enable the api-security-guard skill in your configuration to begin auto-triggering on modifications to API endpoints, request handlers, and authentication middleware.

When should I use non-blocking API security validation instead of traditional blocking checks?

Use non-blocking API security validation when you need to reduce the risk of insecure endpoints entering production while keeping developer workflow unblocked.