Api Security Hardening

What it does

This skill helps secure APIs by implementing best practices such as rate limiting, input validation, authentication enforcement, and encryption of sensitive data. It also identifies common vulnerabilities like SQL injection or insecure endpoints and suggests mitigation strategies.

When to use it

• You are developing a new API and want to ensure it follows security standards from the start.
• Your team is auditing an existing API for potential security weaknesses.
• You need guidance on implementing secure authentication mechanisms such as OAuth 2.0 or JWT.
• You're preparing for compliance with industry regulations like GDPR or HIPAA.

Key capabilities

• Detects and mitigates common API vulnerabilities
• Recommends secure authentication and authorization strategies
• Enforces input validation and data sanitization
• Implements rate limiting to prevent abuse
• Suggests encryption practices for sensitive data

Example prompts

• "How can I secure my REST API against SQL injection attacks?"
• "What are the best practices for implementing OAuth 2.0 in a Node.js application?"
• "Review this API design and identify potential security risks."

Tips & gotchas

• Ensure your development environment supports the recommended security protocols before implementation.
• Regularly update dependencies to avoid known vulnerabilities in third-party libraries.