security-review-owasp-rest-security

What problem does it solve?

This Skill helps security reviewers identify REST API weaknesses that can expose protected operations, bypass authorization, or create unsafe request and response handling risks.

Core Features & Use Cases

• Transport and Token Validation: Review HTTPS enforcement, JWT verification, API key handling, and credential exposure risks.
• Authorization and Workflow Enforcement: Check endpoint-level access control, method-specific permissions, and state transition bypasses.
• Content Handling and Abuse Controls: Inspect content-type validation, parser hardening, error responses, rate limiting, and logging behavior.
• Use Case: A reviewer can use this Skill to assess a new account-management API for missing authorization on DELETE routes, weak token checks, or unsafe XML processing.

Quick Start

Use the security-review-owasp-rest-security skill to review the target REST flow for authentication, authorization, token validation, parser hardening, and response control issues.