Api Review

Name: Api Review
Author: MuhammedZohaib

ASecurity

Review an authorized API surface for access control, mass assignment, schema validation, rate limiting, SSRF, error leakage, webhook verification, and unsafe defaults. Use for REST, GraphQL, RPC, and webhook handlers.

3 stars
0 votes
0 copies
5 views
Added May 26, 2026

developmentapi

Works with

Security analysis

A100/100

Scanned May 27, 2026

npx -y skills add MuhammedZohaib/patchman --skill api-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Api Review?

Add the live security badge to your README. It updates with every re-scan.

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/muhammedzohaib-api-review/badge)](https://www.skillsdirectory.com/skills/muhammedzohaib-api-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: api-review
description: Review an authorized API surface for access control, mass assignment, schema validation, rate limiting, SSRF, error leakage, webhook verification, and unsafe defaults. Use for REST, GraphQL, RPC, and webhook handlers.
---

# API Review

## Focus

- route, resolver, and webhook authorization
- object scoping and tenant filters
- request validation and mass assignment
- response leakage and error behavior
- rate limiting and abuse resistance
- server-side fetch and callback verification

## Output rule

Prioritize externally reachable issues and admin-facing paths first.