Assess API endpoint security, access control, and data handling.
npx skills add https://github.com/isaenter/UES-PRO --skill security-review-isaenter
Please help me install this Agent Skill. Skill: security-review Source: https://github.com/isaenter/UES-PRO/tree/main/frontend-vben/.claude/skills/security-review Command: npx skills add https://github.com/isaenter/UES-PRO --skill security-review-isaenter
This Skill helps teams identify and address security gaps in API endpoints by providing a structured checklist and a clear output path to ensure secure development practices.
Run the security review on your API surface and append results to quality.md.
High-intent search queries and answers about installing and using this skill.
To perform an API endpoint security review, run a structured checklist that enforces authentication, input validation, key management, and dependency hygiene, then append the results to quality.md.
Securing API access control and data handling requires enforcing authentication and authorization permissions, validating external input, avoiding hard-coded secrets, and preventing the logging of passwords, tokens, or PII.
Yes, this security review is applicable to API backends and web services across codebases, pipelines, and deployments, enabling structured checks during development and reviews.
To catch high-risk vulnerabilities in dependencies, you need regular dependency health checks, such as running npm audit or pip audit, to identify and address known issues in your project.
You should avoid hard-coded secrets in API key management because proper key management requires using environment variables or secret stores to prevent unauthorized access and security gaps.
UnicornDesign API contracts and documentation for RESTful and GraphQL services.
shakhovskiya-createAudit CI/CD pipelines and infrastructure configurations for security and reliability.
zm2231Identify and remediate outdated, vulnerable, or conflicting software dependencies.
DevHive1Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.
