security-audit

Input validation prevents SQL injection and XSS by sanitizing and escaping user data before processing. This Skill provides guidelines for whitelisting safe input patterns, using parameterized queries, and encoding output for your context—critical for REST and GraphQL APIs handling untrusted input.

Secure authentication protects credentials and sessions; authorization enforces access control. This Skill covers password handling, session management, and permission enforcement aligned with OWASP Top 10, ensuring only authenticated users access intended resources.

Yes. This Skill is designed for auditing microservices by reviewing input handling, access controls, error responses, and credential management against OWASP and API security best practices, making it ideal for conducting comprehensive security reviews.

Secure API design combines authentication with input validation, error handling that doesn't leak sensitive data, secure credential storage, and proper access control. This Skill covers the full surface—from endpoint design to session management—to reduce vulnerabilities.

API security requires validating all inputs, enforcing authentication and authorization, managing error responses carefully, and storing credentials securely. This Skill provides specific guidelines for both REST and GraphQL endpoints to address OWASP Top 10 risks.

No external dependencies are required. This Skill provides reference documentation and a security checklist framework applicable to any authentication, input handling, or API design scenario—you apply the guidelines to your existing stack.