How do I install the Scanning API Security skill?

Run npx skillmds add majiayu000/scanning-api-security in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Scanning API Security safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Scanning API Security?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Scanning API Security free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Scanning API Security?

majiayu000 (@majiayu000) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Scanning API Security by majiayu000

Name: Scanning API Security
Rating: 4.2 (5 reviews)
Author: majiayu000

Scanning API Security

Detect API security vulnerabilities including injection, broken auth, and data exposure. Use when scanning APIs for security vulnerabilities. Trigger with phrases like "scan API security", "check for vulnerabilities", or "audit API security".

majiayu000 e584baa 2 files · 3.1 KB Updated Sep 9, 2026 567 repo stars

File contents

Scanning Api Security

Overview

This skill provides automated assistance for api security scanner tasks. This skill provides automated assistance for the described functionality.

Prerequisites

Before using this skill, ensure you have:

API design specifications or requirements documented
Development environment with necessary frameworks installed
Database or backend services accessible for integration
Authentication and authorization strategies defined
Testing tools and environments configured

Instructions

Use Read tool to examine existing API specifications from {baseDir}/api-specs/
Define resource models, endpoints, and HTTP methods
Document request/response schemas and data types
Identify authentication and authorization requirements
Plan error handling and validation strategies
Generate boilerplate code using Bash(api:security-*) with framework scaffolding
Implement endpoint handlers with business logic
Add input validation and schema enforcement
Integrate authentication and authorization middleware
Configure database connections and ORM models
Write integration tests covering all endpoints

See {baseDir}/references/implementation.md for detailed implementation guide.

Output

{baseDir}/src/routes/ - Endpoint route definitions
{baseDir}/src/controllers/ - Business logic handlers
{baseDir}/src/models/ - Data models and schemas
{baseDir}/src/middleware/ - Authentication, validation, logging
{baseDir}/src/config/ - Configuration and environment variables
OpenAPI 3.0 specification with complete endpoint definitions

Error Handling

See {baseDir}/references/errors.md for comprehensive error handling.

Examples

See {baseDir}/references/examples.md for detailed examples.

Resources

Express.js and Fastify for Node.js APIs
Flask and FastAPI for Python APIs
Spring Boot for Java APIs
Gin and Echo for Go APIs
OpenAPI Specification 3.0+ for API documentation

---name: scanning-api-securitydescription: Detect API security vulnerabilities including injection, broken auth, and data exposure. Use when scanning APIs for security vulnerabilities. Trigger with phrases like "scan API security", "check for vulnerabilities", or "audit API security".license: MIT--- # Scanning Api Security ## Overview This skill provides automated assistance for api security scanner tasks. This skill provides automated assistance for the described functionality. ## Prerequisites Before using this skill, ensure you have: - API design specifications or requirements documented - Development environment with necessary frameworks installed - Database or backend services accessible for integration - Authentication and authorization strategies defined - Testing tools and environments configured ## Instructions 1. Use Read tool to examine existing API specifications from {baseDir}/api-specs/ 2. Define resource models, endpoints, and HTTP methods 3. Document request/response schemas and data types 4. Identify authentication and authorization requirements 5. Plan error handling and validation strategies 1. Generate boilerplate code using Bash(api:security-*) with framework scaffolding 2. Implement endpoint handlers with business logic 3. Add input validation and schema enforcement 4. Integrate authentication and authorization middleware 5. Configure database connections and ORM models 1. Write integration tests covering all endpoints See `{baseDir}/references/implementation.md` for detailed implementation guide. ## Output - `{baseDir}/src/routes/` - Endpoint route definitions - `{baseDir}/src/controllers/` - Business logic handlers - `{baseDir}/src/models/` - Data models and schemas - `{baseDir}/src/middleware/` - Authentication, validation, logging - `{baseDir}/src/config/` - Configuration and environment variables - OpenAPI 3.0 specification with complete endpoint definitions ## Error Handling See `{baseDir}/references/errors.md` for comprehensive error handling. ## Examples See `{baseDir}/references/examples.md` for detailed examples. ## Resources - Express.js and Fastify for Node.js APIs - Flask and FastAPI for Python APIs - Spring Boot for Java APIs - Gin and Echo for Go APIs - OpenAPI Specification 3.0+ for API documentation

Frequently asked questions