skills.rest
modu-ai
modu-aiOFFICIAL
Explore all skills by this author →
Website𝕏@MODU_AIGitHub

moai-ref-owasp-checklist

Apply OWASP Top 10 security patterns to backend REST and GraphQL APIs.

4|4|Updated Apr 21, 2026
Search Tags:#checklist#security#authentication#validation#owasp#api-security#headers
One-click install
npx skills add https://github.com/modu-ai/moai-studio --skill moai-ref-owasp-checklist-modu-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: moai-ref-owasp-checklist
Source: https://github.com/modu-ai/moai-studio/tree/main/.claude/skills/moai-ref-owasp-checklist
Command: npx skills add https://github.com/modu-ai/moai-studio --skill moai-ref-owasp-checklist-modu-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Apply OWASP Top 10 security patterns to backend APIs with an actionable, reference-driven approach to authentication, input validation, and HTTP security headers.

Core Features & Use Cases

  • OWASP API Security Top 10 with actionable checks for authentication, authorization, input validation, and header security.
  • Reference material and guidelines for secure coding, API design, and threat modeling.
  • Applicable to REST and GraphQL services, microservice architectures, and API gateways.

Quick Start

Run a security audit against your API endpoints using the OWASP reference in this skill.

Frequently Asked Questions about moai-ref-owasp-checklist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What are the OWASP Top 10 security patterns for backend APIs?▼

OWASP Top 10 security patterns for APIs address authentication, authorization, input validation, and HTTP security headers to protect REST and GraphQL services from common vulnerabilities.

How do I audit my API endpoints against the OWASP API security checklist?▼

Run a security audit by applying actionable OWASP checks to your API endpoints, verifying authentication mechanisms, input validation rules, and HTTP security header configurations.

Does this OWASP API security checklist work for both REST and GraphQL services?▼

Yes, the OWASP security checklist applies to both REST and GraphQL services, covering microservice architectures and API gateway configurations for comprehensive threat modeling.

What HTTP security headers should I check during an API security audit?▼

An API security audit should check HTTP security headers alongside authentication and input validation, using reference guidelines to ensure proper header configuration for secure API design.

Can I use this checklist for architecture reviews and secure API design?▼

Yes, the checklist provides reference material and guidelines for secure coding and API design, making it suitable for architecture reviews and threat modeling during API development.

Related Skills

Explore More Software Engineering Skills→
VeradelaCruzVeradelaCruz

api-design

Define API requirements and generate OpenAPI or GraphQL schemas.

Community
Intermediate
NickCrewNickCrew
29

security-testing-patterns

Identify and mitigate security vulnerabilities in CI/CD pipelines.

Community
Advanced
icartshicartsh
4

code-analyze

Analyze .NET solutions for code quality, security, and dependency issues.

Community
Advanced
kalshamsikalshamsi
1

security-test-generator

Generate framework-ready security test suites for REST or GraphQL services.

Community
Advanced