How does it help prevent SQL Injection?

It provides implementation guides for parameterized queries, ORM escaping, and strict input schema validation using tools like Zod.

Does it help with rate limiting and DDoS protection?

Yes, it covers implementing rate limiting per user/IP, setting up request quotas, and configuring API throttling to prevent abuse.

What types of APIs does this skill support?

This skill provides security patterns and best practices for REST, GraphQL, and WebSocket APIs.

Is this skill useful for security audits?

Absolutely. It includes steps for verifying implementations against common vulnerabilities and conducting basic penetration testing on your endpoints.

Can I use this for implementing multi-factor authentication (MFA)?

Yes, the skill includes guidance on setting up MFA and secure session management as part of the authentication workflow.

API Security Best Practices

Name: API Security Best Practices
Author: JantonioFC

byJantonioFC

•

Desarrollo de API

Implements robust security patterns for APIs, including advanced authentication, authorization, and protection against common vulnerabilities.

API Security Best Practices provides developers with a comprehensive framework for building and maintaining secure backend services. It offers detailed implementation patterns for JWT and OAuth 2.0 authentication, role-based access control (RBAC), and strict input validation using modern libraries. By guiding users through the mitigation of OWASP API Top 10 risks, rate limiting strategies, and data encryption protocols, this skill ensures that REST, GraphQL, and WebSocket APIs remain resilient against injection attacks, unauthorized access, and service abuse.

Características Principales

01Secure authentication setup including JWT, OAuth 2.0, and MFA

02Comprehensive input validation and sanitization to prevent injection

03Data encryption patterns for both transit (TLS) and storage

04Rate limiting and throttling configurations to mitigate DDoS risks

05Security testing workflows based on OWASP API Top 10 standards

062 GitHub stars

Casos de Uso

01Implementing complex authorization models like RBAC and ABAC

02Securing new or existing REST and GraphQL API endpoints

03Conducting security reviews and preparations for API audits

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jantoniofc/skillsbank api-security-best-practices

For use in Claude.ai and ChatGPT

Características Principales

01Secure authentication setup including JWT, OAuth 2.0, and MFA

02Comprehensive input validation and sanitization to prevent injection

03Data encryption patterns for both transit (TLS) and storage

04Rate limiting and throttling configurations to mitigate DDoS risks

05Security testing workflows based on OWASP API Top 10 standards

062 GitHub stars

Casos de Uso

01Implementing complex authorization models like RBAC and ABAC

02Securing new or existing REST and GraphQL API endpoints

03Conducting security reviews and preparations for API audits

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jantoniofc/skillsbank api-security-best-practices

For use in Claude.ai and ChatGPT