关于
This skill provides specialized guidance for developers to architect and implement high-security APIs by providing domain-specific patterns for authentication protocols like JWT and OAuth 2.0, role-based access control (RBAC), and rigorous input validation. It covers essential defense mechanisms such as rate limiting to prevent DDoS attacks, data encryption for both transit and storage, and systematic protection against the OWASP API Top 10 vulnerabilities. Whether you are building a new RESTful service or auditing an existing GraphQL endpoint, this skill ensures your backend infrastructure meets modern security standards and production-grade requirements.
