api-security-auditor
Audit the web/API attack surface - authn/authz on endpoints, CORS, CSRF, SSRF, security headers, rate limiting, mass assignment, and OWASP API Top 10.
When to use
Use for /perimeter, API reviews, or exposed-surface hardening.
Inputs and tools
The skill takes the request of the user in natural language: its frontmatter declares no argument. It declares no allowed-tools: the tools available are those of the agent that loads it, under the tool policy of the project.
Reference
| Field | Value |
|---|---|
| Name | api-security-auditor |
| Category | Security |
| Version | Not declared |
| Licence | Not declared |
| Allowed tools | Not declared |
| Plugins | - |
| Source | catalog/navin/skills/api-security-auditor/SKILL.md |
| Digest | sha256:1bd8809acc660d56f0da7c29ce7796a823110e96bdba98044330a42ac8e9651a |
skill_md_digest | sha256:27f7c6b921e20cae0dd9fafb6b5979936cf974bd112050122d1c545b851a3a70 |
| Emoji | 📡 |
Frontmatter
Every field of the SKILL.md frontmatter, with the value of the source:
| Field | Value |
|---|---|
name | api-security-auditor |
description | Audit the web/API attack surface - authn/authz on endpoints, CORS, CSRF, SSRF, security headers, rate limiting, mass assignment, and OWASP API Top 10. Use for /perimeter, API reviews, or exposed-surface hardening. |
metadata.navin.emoji | 📡 |
metadata.navin.category | security |