api-security

SQL injection prevention requires using parameterized queries or an ORM instead of string concatenation. This Skill enforces parameterized query patterns and ORM usage across all database interactions, blocking injection attacks at the data layer before they compromise your database.

Implement explicit authentication on every endpoint using JWT tokens with expiration times and robust authorization checks for each user request. This Skill enforces these patterns automatically, ensuring only verified and authorized users access protected resources.

Input validation uses strict schemas to sanitize all user-supplied data before processing. This Skill applies schema validation with pydantic, enforces output escaping, and requires Content Security Policy headers to block Cross-Site Scripting and other injection vectors.

Yes. This Skill targets existing API implementations by imposing authentication, authorization, input validation, parameterized queries, output escaping, and secure headers across endpoints, middleware, and token handling to meet OWASP compliance requirements.

Rate limiting controls request frequency per user or IP address to prevent denial-of-service attacks. This Skill integrates slowapi for rate limiting enforcement, protecting your API from excessive traffic and unauthorized access attempts.

HTTPS encryption protects data in transit from interception. This Skill enforces HTTPS requirements and secure response handling as part of API security design, ensuring sensitive information remains protected across network communication.