Does it support GraphQL and WebSockets?

Yes, the skill covers security patterns applicable across various architectures including REST, GraphQL, and WebSocket APIs.

Can this skill help with password security?

Absolutely. It recommends specific hashing standards like bcrypt with appropriate salt rounds and provides guidance on enforcing strong password requirements.

How does this skill help with OWASP compliance?

It provides specific implementation patterns and checklists mapped directly to the OWASP API Security Top 10, helping you mitigate risks like Broken Object Level Authorization and SSRF.

How does it handle rate limiting?

The skill provides guidance on implementing rate limiting per user or IP, setting up throttling, and using tools like Redis for distributed rate limiting across your infrastructure.

API Security Best Practices

Name: API Security Best Practices
Author: lev-os

bylev-os

0•

보안 및 테스팅

Implements industry-standard security patterns and protection strategies for REST, GraphQL, and WebSocket APIs.

This skill provides a comprehensive framework for building and auditing secure APIs by guiding developers through the implementation of robust authentication, authorization, and data protection protocols. It offers actionable patterns for preventing critical vulnerabilities such as SQL injection, DDoS attacks, and cross-site scripting while ensuring compliance with the OWASP API Security Top 10. Whether you are architecting a new system or hardening an existing one, this skill automates the application of security headers, rate limiting, and encryption standards to protect sensitive data and maintain system integrity.

주요 기능

01Input validation and sanitization for injection prevention

02Secure data handling and encryption at rest and in transit

03OWASP API Top 10 vulnerability mitigation checklists

040 GitHub stars

05Rate limiting and throttling strategies for DDoS protection

06Comprehensive authentication and RBAC implementation patterns

사용 사례

01Implementing rate limiting and request quotas to prevent resource consumption abuse

02Conducting security reviews and hardening existing API endpoints against common attacks

03Designing a secure JWT or OAuth 2.0 authentication workflow for new microservices

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lev-os/agents api-security-best-practices

For use in Claude.ai and ChatGPT

Download Skill