Review an authorized API surface for access control, mass assignment, schema validation, rate limiting, SSRF, error leakage, webhook verification, and unsafe defaults. Use for REST, GraphQL, RPC, and webhook handlers.
Scanned 9/7/2026
Install to Claude Code
Skills Directorynpx -y skills add MuhammedZohaib/patchman --skill api-review --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Api Review?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/muhammedzohaib-api-review-patchman)More formats (shields.io, HTML) on the badges page.
---
name: api-review
description: Review an authorized API surface for access control, mass assignment, schema validation, rate limiting, SSRF, error leakage, webhook verification, and unsafe defaults. Use for REST, GraphQL, RPC, and webhook handlers.
---
# API Review
## Focus
- route, resolver, and webhook authorization
- object scoping and tenant filters
- request validation and mass assignment
- response leakage and error behavior
- rate limiting and abuse resistance
- server-side fetch and callback verification
## Output rule
Prioritize externally reachable issues and admin-facing paths first.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
