10 actions in 10 pieces of software · ranked by words, meaning and measured trust · 625 ms

1. 1api-securityverified and signedpassport

   skillzhaoxuya520/reverse-skillrecord

   • api-security

     Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI/CD testing.

2. 2api-securityverified and signedpassport

   skilljefflester/claude-skills-superchargedrecord

   • api-security

     API security best practices and common vulnerability prevention. Enforces security checks for authentication, input validation, SQL injection, XSS, and OWASP Top 10 vulnerabilities. Use when building or modifying APIs.

3. 3api-security-testingverified and signedpassport

   skillusestrix/strixrecord

   • api-security-testing

     Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), br

4. 4api-security-best-practicesverified and signedpassport

   skilldavila7/claude-code-templatesrecord32,782 stars

   • api-security-best-practices

     Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

5. 5api-security-testingverified and signedpassport

   skillsickn33/agentic-awesome-skillsrecord

   • api-security-testing

     API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

6. 6api-security-hardeningverified and signedpassport

   skillsecondsky/claude-skillsrecord

   • api-security-hardening

     REST API security hardening with authentication, rate limiting, input validation, security headers. Use for production APIs, security audits, defense-in-depth, or encountering vulnerabilities, injection attacks, CORS issues.

7. 7api-security-hardeningverified and signedpassport

   skillaj-geddes/useful-ai-promptsrecord

   • api-security-hardening

     Secure REST APIs with authentication, rate limiting, CORS, input validation, and security middleware. Use when building or hardening API endpoints against common attacks.

8. 8conducting-api-security-testingverified and signedpassport

   skillmukul975/anthropic-cybersecurity-skillsrecord

   • conducting-api-security-testing

     Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and business logic. The tester uses the OWASP API Security Top 10 as the testing framework, combining Burp Suite interception with Postman collecti

9. 9api-security-reviewverified and signedpassport

   skillowasp/secure-agent-playbookrecord

   • api-security-review

     Comprehensive API security review against OWASP API Security Top 10 (2023). Use when reviewing OpenAPI/Swagger specs, auditing REST/GraphQL/gRPC implementations, testing authentication mechanisms, or checking API gateway configurations. Covers BOLA/IDOR, broken auth, mass assignment, rate limiting,

10. 10middleBrick | API-Securityverified and signedpassport

    MCP serverrecord

    • scan_api

      Scan an API endpoint for security vulnerabilities and get a risk score