api-security-best-practices
Implement secure API design patterns including authentication, authorization
by sickn33Free
Description
api-security-best-practices is an agent skill for implementing secure API design. It covers authentication, authorisation, input validation, rate limiting and protection against common API vulnerabilities. The skill reviews a request from the caller's identity, through authorisation, validated input and storage, to the response that is observed. It works with the application's own identity provider and data model rather than introducing a second authentication system. Use it when you are adding a protected endpoint, reviewing access to objects, replacing permissive request parsing, or investigating a path an attacker could use to abuse an API. For a concrete defect it starts from the failing route and its callers, and it does not add unrelated security infrastructure. It is part of the sickn33/agentic-awesome-skills repository on GitHub, which has about 47,600 stars. The listing shows it as free, and it has about 8,800 installs. Its security audits show passes from Gen Agent Trust Hub, Socket and Snyk. Install it with npx skills add https://github.com/sickn33/agentic-awesome-skills --skill api-security-best-practices.…
Highlights
- Authentication and authorisation review
- Input validation
- Rate limiting
- Object access checks
- Works with the existing identity provider
Ratings & Reviews
No ratings yet
Be the first to rate api-security-best-practices.
People also visit
api-security-best-practices FAQ
What does it review?
A request from the caller's identity through authorisation, input validation, storage and the response.
Does it add a new login system?
No. The skill says to keep the application's own identity provider and data model.
Where does it start with a defect?
At the failing route and its callers, without adding unrelated security infrastructure.
How do I install it?
Run npx skills add https://github.com/sickn33/agentic-awesome-skills --skill api-security-best-practices.
Is it checked for security?
Its security audits show passes from Gen Agent Trust Hub, Socket and Snyk.
What are the best api-security-best-practices alternatives?
Popular alternatives to api-security-best-practices include perl-security, quarkus-security and cc-skill-security-review. See all api-security-best-practices alternatives