apisec-inc/apisec-skills

API security skills and rules for Cursor, Claude Code, Copilot, and all major AI coding agents. OWASP API Top 10 coverage — zero configuration.

18Stars on the repository
11Mods indexed here, across every type
5mo agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

admin-rbac

01

apisec-inc/apisec-skills

Cursor rule

Requires explicit role assertion before executing admin-scoped operations. Prevents privilege escalation and BFLA vulnerabilities.

18 5mo ago A 194 tokens original MIT

auth-required

02

apisec-inc/apisec-skills

Cursor rule

Enforces authentication middleware on all API route handlers. Applies to Express, FastAPI, Django, Spring, Go Gin.

18 5mo ago A 251 tokens original MIT

error-sanitization

03

apisec-inc/apisec-skills

Cursor rule

Prevents leaking internal error details, stack traces, or database error messages in API responses.

18 5mo ago A 197 tokens original MIT

input-validation

04

apisec-inc/apisec-skills

Cursor rule

Requires validation of all user-supplied input before use. Prevents injection, unexpected types, and missing required fields.

18 5mo ago A 229 tokens original MIT

ownership-check

05

apisec-inc/apisec-skills

Cursor rule

Requires ownership validation on any endpoint that accesses database records by user-supplied ID. Prevents BOLA/IDOR vulnerabilities.

18 5mo ago A 198 tokens original MIT