api-security-best-practices

SKILL.md

Guide developers in building secure APIs by implementing authentication, authorization, input validation, rate limiting, and protection against common vulnerabilities. This skill covers security patterns for REST, GraphQL, and WebSocket APIs.

Problem: JWT Secret Exposed in Code Symptoms: JWT secret hardcoded or committed to Git Solution: \\\`javascript // ❌ Bad const JWTSECRET = 'my-secret-key';

// ✅ Good const JWTSECRET = process.env.JWTSECRET; if (!JWTSECRET) { throw new Error('JWTSECRET environment variable is required'); }

實施安全的 API 設計模式，包括身份驗證、授權、輸入驗證、速率限制和針對常見 API 漏洞的防護 來源：sickn33/antigravity-awesome-skills。

查看原文