api-security-review

Review API endpoints against OWASP Top 10 security principles.

68|19|Updated Nov 21, 2025

Search Tags:#authorization #security #authentication #api #validation #owasp #review

Ready to run

npx skills add https://github.com/bobmatnyc/claude-mpm-skills --skill api-security-review-bobmatnyc

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: api-security-review
Source: https://github.com/bobmatnyc/claude-mpm-skills/tree/main/toolchains/universal/security/api-review
Command: npx skills add https://github.com/bobmatnyc/claude-mpm-skills --skill api-security-review-bobmatnyc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive checklist and practical code examples to ensure your API endpoints are secure against common vulnerabilities before they go live.

Core Features & Use Cases

Pre-Deployment Audit: Use the checklist to systematically review authentication, authorization, input validation, and output safety.
Secure Coding Examples: Learn best practices for implementing security in popular frameworks like Next.js, Express.js, and FastAPI.
Use Case: Before merging a pull request that introduces a new API endpoint for user profile updates, run through this Skill's checklist and examples to confirm proper input validation, authorization, and data sanitization are in place.

Quick Start

Review the API security checklist for the new user endpoint.

Frequently Asked Questions about api-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review my RESTful API endpoints for security vulnerabilities before deployment?▼

To review API endpoints for security vulnerabilities, use a detailed checklist covering authentication, authorization, input validation, output safety, and logging to ensure adherence to OWASP Top 10 API Security principles before deployment.

What is included in an OWASP API security checklist for Express.js or FastAPI?▼

An OWASP API security checklist for frameworks like Express.js and FastAPI includes practical code examples and best practices for implementing endpoint authentication, authorization, input validation, and data sanitization.

How do I implement proper authorization and input validation for a new API endpoint?▼

To implement proper authorization and input validation for a new API endpoint, apply secure coding examples that verify user permissions and sanitize incoming data to prevent common vulnerabilities during profile updates.

Does this API security review process work with Next.js backend routes?▼

Yes, this API security review process works with Next.js backend routes, providing secure coding examples and validation checklists specifically tailored for developers building endpoints in Next.js, Express.js, and FastAPI frameworks.

What's the best way to audit API output safety and logging mechanisms?▼

The best way to audit API output safety and logging mechanisms is to systematically review your endpoints against a pre-deployment checklist that verifies data sanitization and secure logging practices to prevent information leakage.

When do I need to run an API security review checklist on my codebase?▼

You need to run an API security review checklist on your codebase before merging a pull request that introduces new endpoints, ensuring proper data sanitization, authentication, and authorization are in place before deployment.