Jamaalx

API Security — Security skill for Claude Code

Security community

API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-level authz (mass assignment + excessive data exposure), unrestricted resource consumption.

How to install API Security

Installs to ~/.claude/skills/jamaalx-claude-skills-api-security/SKILL.md

Terminal
mkdir -p ~/.claude/skills/jamaalx-claude-skills-api-security && curl -fsSL https://raw.githubusercontent.com/Jamaalx/claude-skills/HEAD/commands/api-security.md -o ~/.claude/skills/jamaalx-claude-skills-api-security/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What API Security does

description: "API security audit (OWASP API Security Top 10 2023): BOLA/IDOR, broken authentication, broken object-property-level authz (mass assignment + excessive data exposure), unrestricted resource consumption / rate limiting, broken function-level authz, SSRF, security misconfiguration, improper inventory (shadow/zombie endpoints), unsafe consumption of 3rd-party APIs. Tests REST + GraphQL + serverless/edge routes. Generates API-SECURITY-FIXES.md." allowed-tools: [Bash, Read, Glob, Gre

Alternatives in Security

  • Skill Audit — Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review 2.8k ★
  • Commit Hook Checklist — Audit commit-hook automation as gates against AI slop and broken commits (Node.js, Go, polyglot) 168 ★
  • Mobile Review — Senior-level deep review of an existing mobile app 107 ★

Full documentation available on GitHub

View Source Repository

Related Skills

Authz — Security skill for Claude Code

Authz

Hunt broken access control — IDOR, missing role checks, mass assignment, and tenant isolation gaps. OWASP A01,

Security community
0x002132 Skills Bugbounty Hunt API Misconfig — Security skill for Claude Code

0x002132 Skills Bugbounty Hunt API Misconfig

Hunt API security misconfiguration — mass assignment, JWT attacks, prototype pollution, CORS, HTTP verb tamper

Security community
Audit Security — Security skill for Claude Code

Audit Security

Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat

Security community
Audit Patterns — Security skill for Claude Code

Audit Patterns

Design patterns audit. Analyzes stability (Circuit Breaker, Retry, Rate Limiter, Bulkhead), behavioral (Strate

Security community
LLM Security — Security skill for Claude Code

LLM Security

AI/LLM agent security audit (OWASP GenAI/LLM Top 10 2026): prompt injection (direct + indirect/RAG), jailbreak

Security community
Codebase Index — Security skill for Claude Code

Codebase Index

Index-First Navigation for AI Agents: Reduce token consumption by 85% with deterministic directory indexing an

Security community

Related Agents

Kavach API — Security agent for Claude Code

Kavach API

KAVACH API security + auth/session specialist. Traces every endpoint for BOLA/IDOR, BFLA, broken auth, mass as

Security community
Access Control Hunter — Development agent for Claude Code

Access Control Hunter

Active IDOR / BOLA / BFLA / mass-assignment hunter for an ingested program. Consumes webvuln-surface injection

Development community
Timps API Security Tester — Security agent for Claude Code

Timps API Security Tester

Run an OWASP API Security Top-10 (2023) audit against an OpenAPI spec or live endpoint — broken auth, BOLA, ma

Security community