reviewing-security

Security reviews against OWASP API Top 10 systematically check APIs for vulnerabilities across authentication, authorization, data exposure, input validation, rate limiting, and error handling. Provide your API spec or endpoints and this skill generates a structured assessment report with remediation steps for both REST and gRPC interfaces.

OWASP API Security Top 10 (2023) addresses authentication flaws, authorization issues, excessive data exposure, input validation gaps, rate limiting failures, and improper error handling. This skill applies those categories to identify and prioritize vulnerabilities in your microservice architectures.

Yes, this skill covers both REST and gRPC interfaces. It enforces a structured checklist with concrete security checks across both protocol types, making it suitable for auditing mixed microservice architectures.

This skill performs version-control checks by generating security assessment reports tied to your API endpoints. Run it as part of your review workflow to verify compliance and catch vulnerabilities before deployment.

The skill returns language-specific security best practices and remediation workflows for each vulnerability found. Each assessment includes concrete next steps to fix identified issues across authentication, authorization, validation, and error handling.

Provide a high-level API spec or list of endpoints to begin. The skill doesn't require exhaustive documentation—a summary of your REST or gRPC services is sufficient to run the structured OWASP assessment.