
from useful-ai-prompts248
Practical guidance and code snippets to harden REST APIs: authentication, rate limiting, input validation, headers, and middleware.
Provides practical, ready-to-adopt patterns and code examples to secure REST APIs. The skill collects best practices (rate limiting, CORS, input validation, security headers), implementation snippets for popular frameworks, and reference guides for deeper hardening tasks.
Use this skill when building new APIs, performing security audits, remediating vulnerabilities, or preparing public/high-traffic endpoints for production. It's appropriate for developers upgrading an existing service and for teams preparing for compliance reviews.
Broadly compatible with code-capable assistants and developer tooling (Copilot-style, Codex, Cursor, Gemini Code). The examples are language-agnostic patterns with concrete JS snippets included.
API security hardening skill with a reference-style SKILL.md covering auth, rate limiting, CORS, and input validation for Node.js/Express and Python FastAPI. The bundled security-checklist.sh script crashes due to a bash syntax error (${{}} instead of ${}) and produces only a minimal template checklist. SKILL.md quick-start code is truncated. No security concerns found.
Clean security profile — no exfiltration, phone-home, or destructive patterns. Main issues are code quality: broken script syntax, truncated code example, and a very thin checklist output. Architecture is decent with proper frontmatter and reference structure. Useful topic but the execution is shallow.