Skip to content
Back to skills

Api Review

ASecurity

Review an authorized API surface for access control, mass assignment, schema validation, rate limiting, SSRF, error leakage, webhook verification, and unsafe defaults. Use for REST, GraphQL, RPC, and webhook handlers.

  • 3 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 7, 2026
securityapi

Works with

  • api

Security analysis

A100/100

Scanned September 7, 2026

npx -y skills add MuhammedZohaib/patchman --skill api-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Api Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Api Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/muhammedzohaib-api-review-patchman/badge)](https://www.skillsdirectory.com/skills/muhammedzohaib-api-review-patchman)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: api-review
description: Review an authorized API surface for access control, mass assignment, schema validation, rate limiting, SSRF, error leakage, webhook verification, and unsafe defaults. Use for REST, GraphQL, RPC, and webhook handlers.
---

# API Review

## Focus

- route, resolver, and webhook authorization
- object scoping and tenant filters
- request validation and mass assignment
- response leakage and error behavior
- rate limiting and abuse resistance
- server-side fetch and callback verification

## Output rule

Prioritize externally reachable issues and admin-facing paths first.

Attribution

MuhammedZohaibView sourceSee grades on GitHubMore from MuhammedZohaib

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Related skills

View all in security →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.