Assess API security against OWASP API Top 10 risks.
npx skills add https://github.com/j4hr3n/dotfiles --skill api-security-review-j4hr3n
Please help me install this Agent Skill. Skill: api-security-review Source: https://github.com/j4hr3n/dotfiles/tree/main/configs/claude-code/skills/api-security-review Command: npx skills add https://github.com/j4hr3n/dotfiles --skill api-security-review-j4hr3n
Comprehensive API security assessment aligning with OWASP API Top 10 to identify risks across API specs, implementations, and gateway configurations, with real-world attack scenarios and practical remediation guidance.
Run the API security review workflow against your OpenAPI specs to generate a remediation-ready report
High-intent search queries and answers about installing and using this skill.
To perform an API security audit aligned with OWASP API Top 10, you assess OpenAPI/Swagger specs, REST/GraphQL/gRPC implementations, and API gateway configurations. This process identifies vulnerabilities across API1-API10 and outputs a remediation-ready report with PoC examples.
Yes, comprehensive API security testing covers REST, GraphQL, and gRPC implementations alongside OpenAPI/Swagger specs. The assessment evaluates authentication flows and maps dependencies to uncover real-world attack scenarios across these diverse API architectures.
An API gateway and infrastructure security review evaluates WAF rules, TLS configurations, and routing policies. It assesses infrastructure across development, staging, and production environments to identify security risks and produce actionable remediation guidance.
Validating JWT, OAuth, API keys, and session management involves an authentication deep dive to discover endpoints and evaluate security schemes. The process identifies vulnerabilities aligned with OWASP API Top 10 risks and provides automated testing guidance.
API security testing applies across development, staging, and production environments. It assesses API implementations and gateway configurations in each setting to identify contextual risks and deliver prioritized fixes tailored to that specific environment.
OneWave-AIGenerate OpenAPI/Swagger specs and endpoint documentation for REST, GraphQL, WebSocket, and gRPC APIs.
pextacyScan codebases for OWASP Top 10 risks and report prioritized fixes.
shakhovskiya-createAudit CI/CD pipelines and infrastructure configurations for security and reliability.
kivo360Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.
