skills.rest
Camilo8902
Camilo8902COMMUNITY
Explore all skills by this author →
GitHub

api-security-hardener

Harden Express.js APIs with rate limiting, JWT authentication, and Zod validation.

Updated Jan 24, 2026
Search Tags:#authorization#authentication#input validation#rate limiting#web security#api security
One-click install
npx skills add https://github.com/Camilo8902/GabyCosmetics --skill api-security-hardener
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-security-hardener
Source: https://github.com/Camilo8902/GabyCosmetics/tree/main/.claude/skills/api-security-hardener
Command: npx skills add https://github.com/Camilo8902/GabyCosmetics --skill api-security-hardener

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires express, zod, jsonwebtoken, helmet, express-rate-limit, rate-limit-redis, ioredis, isomorphic-dompurify, uuid, pg, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to protect APIs from common vulnerabilities, ensuring data integrity, preventing abuse, and maintaining service availability.

Core Features & Use Cases

  • Input Validation: Prevents malformed or malicious data from entering your system.
  • Authentication & Authorization: Ensures only legitimate users access appropriate resources.
  • Rate Limiting: Protects against denial-of-service attacks and brute-force attempts.
  • Security Headers: Mitigates various HTTP-based attacks.
  • Use Case: When deploying a new user management API, use this Skill to implement robust input validation for user credentials, authenticate API requests using JWT, and apply rate limiting to login endpoints to prevent brute-force attacks.

Quick Start

Apply the api-security-hardener skill to secure your Express.js API endpoints.

Frequently Asked Questions about api-security-hardener

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I protect my Express.js API from brute-force attacks and malicious payloads?▼

Protect Express.js APIs by implementing rate limiting with express-rate-limit, validating inputs via Zod schemas, and authenticating requests with JWT to prevent brute-force attacks and malformed data entry.

What is the best way to prevent SQL injection and XSS in web APIs?▼

Preventing SQL injection and XSS requires parameterized queries for database operations and output sanitization using isomorphic-dompurify, ensuring malformed data cannot execute malicious scripts.

How do I add security headers and request throttling to an existing Express application?▼

Add security headers using Helmet and request throttling using express-rate-limit with a Redis store, mitigating HTTP-based attacks and preventing denial-of-service attempts on Express endpoints.

Can I use Zod for schema validation alongside JWT authentication in my API?▼

Yes, Zod schema validation works alongside JWT authentication to ensure only legitimate users access appropriate resources while preventing malformed or malicious data from entering your system.

Does this API security approach support distributed rate limiting with Redis?▼

Yes, distributed rate limiting is supported via rate-limit-redis and ioredis dependencies, allowing request throttling to scale across multiple server instances for comprehensive denial-of-service protection.

Related Skills

Explore More Software Engineering Skills→
googlegoogle
17.1k

cloud-sql-basics

Manage Cloud SQL instances and databases using gcloud CLI and Terraform.

Official
Advanced
AndyAnh174AndyAnh174

Cross-Site Scripting and HTML Injection Testing

Detect and exploit stored, reflected, and DOM-based XSS vulnerabilities.

Community
Advanced
doanchienthangdevdoanchienthangdev
4

Developing with Redis

Implement Redis caching, data structures, and pub/sub messaging with ioredis.

Community
Intermediate
epieczkoepieczko

threat.model.generate

Generate STRIDE-based threat models with CVSS risk scoring and mitigation recommendations.

Community
Advanced