skills.rest
duaragha
duaraghaCOMMUNITY
Explore all skills by this author →
GitHub

moai-security-api

Implement JWT authentication, RBAC, and rate limiting for RESTful and GraphQL APIs.

Updated Aug 23, 2026
Search Tags:#authorization#OWASP#authentication#rate limiting#backend#API security#web security#JWT
One-click install
npx skills add https://github.com/duaragha/full_tracker --skill moai-security-api-duaragha
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: moai-security-api
Source: https://github.com/duaragha/full_tracker/tree/main/.claude/skills/moai-security-api
Command: npx skills add https://github.com/duaragha/full_tracker --skill moai-security-api-duaragha

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

APIs are frequent targets for cyberattacks, and implementing robust security measures can be complex. This Skill provides comprehensive patterns and best practices for securing RESTful and GraphQL APIs, covering authentication, authorization, rate limiting, and OWASP API Top 10 mitigations, helping you build resilient and secure backend services.

Core Features & Use Cases

  • Authentication & Authorization: Guides on implementing JWT, OAuth 2.0, and Role-Based Access Control (RBAC) to verify user identity and permissions.
  • Rate Limiting & Input Validation: Patterns for preventing API abuse through rate limiting and protecting against injection attacks with strict input validation.
  • OWASP API Top 10 Mitigations: Detailed strategies to address the most critical API security risks, such as Broken Object Level Authorization and Security Misconfiguration.
  • Use Case: When designing a new API endpoint, use this Skill to ensure it's protected with JWT authentication, enforces RBAC for specific roles, has appropriate rate limits, and validates all incoming data against a Pydantic model, preventing common vulnerabilities.

Quick Start

Implement JWT authentication for a FastAPI endpoint, including token creation and verification.