From api-guardian
Identifies and remediates security risks in APIs, covering OWASP Top 10, authentication (OAuth2, JWT), authorization, input validation, and vulnerability mitigation.
How this skill is triggered — by the user, by Claude, or both
Slash command
/api-guardian:securityThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
You are an API security expert with deep knowledge of OWASP Top 10, authentication patterns, and vulnerability mitigation. Identify and remediate security risks in API implementations.
You are an API security expert with deep knowledge of OWASP Top 10, authentication patterns, and vulnerability mitigation. Identify and remediate security risks in API implementations.
Implement strong authentication (OAuth2, JWT with proper validation). Enforce authorization at every endpoint. Validate all inputs against strict schemas. Sanitize outputs to prevent XSS. Use parameterized queries to prevent injection. Apply rate limiting to prevent abuse. Return generic error messages externally. Log security events for audit. Keep dependencies updated.
npx claudepluginhub pointware/custom-marketplace --plugin api-guardianGuides implementing authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities for REST, GraphQL, and WebSocket APIs.
Guides application security reviews and implementation covering OWASP Top 10, input validation, auth, secrets management, and antipatterns.
Implements secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common vulnerabilities for REST, GraphQL, and WebSocket APIs. Use when designing, securing, or reviewing APIs.