API Security Checklist Skill

Skill by ara.so — Security Skills collection.

This skill provides comprehensive guidance on API security best practices based on the widely-adopted API Security Checklist. Use this to design, audit, and secure REST, GraphQL, and OAuth APIs against common vulnerabilities and attack vectors.

Overview

The API Security Checklist covers critical security countermeasures across:

• Authentication - Secure user identity verification
• Authorization - Access control and OAuth flows
• Input Validation - Preventing injection attacks
• Output Security - Secure response handling
• Processing - Backend security measures
• Monitoring - Detection and alerting
• CI/CD - Secure development lifecycle

Installation