API安全最佳實踐 是做什麼的?
實作安全的API設計模式,包括驗證、授權、輸入驗證、速率限制,以及針對常見API漏洞的防護。
實作安全的API設計模式,包括驗證、授權、輸入驗證、速率限制,以及針對常見API漏洞的防護。
這項技能提供了一個全面的指南,幫助開發人員和AI代理實作安全的API設計模式。它涵蓋了關鍵的安全層面,包括驗證、授權、輸入驗證、速率限制,以及針對常見API漏洞(如注入攻擊、跨站腳本(XSS)和跨站請求偽造(CSRF))的防護機制。該技能支援主流平台,如Claude Code、Cursor和Codex,並提供結構化的建議和程式碼片段,以幫助開發人員加強其API的安全。透過遵循這些最佳實務,使用者可以顯著降低安全漏洞的風險,並確保其API設計更加強固且具有彈性。
npx skills add https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/api-security-best-practices實作安全的API設計模式,包括驗證、授權、輸入驗證、速率限制,以及針對常見API漏洞的防護。
This repo contains 20 individual skills — each has its own dedicated page.
Expert in building 3D experiences for the web - Three.js, React Three Fiber, Spline, WebGL, and interactive 3D scenes. Covers product configurators, 3D portfolios, immersive websites, and bringing depth to web experiences.
A hybrid memory system that provides persistent, searchable knowledge management for AI agents (Architecture, Patterns, Decisions).
Memory is the cornerstone of intelligent agents. Without it, every interaction starts from zero. This skill covers the architecture of agent memory: short-term (context window), long-term (vector stores), and the cognitive architectures that organize them.
Expert in designing and building autonomous AI agents. Masters tool use, memory systems, planning strategies, and multi-agent orchestration.
Generate comprehensive, developer-friendly API documentation from code, including endpoints, parameters, examples, and best practices
API design principles and decision-making. REST vs GraphQL vs tRPC selection, response formats, versioning, pagination.
Complete App Store Optimization (ASO) toolkit for researching, optimizing, and tracking mobile app performance on Apple App Store and Google Play Store
Architectural decision-making framework. Requirements analysis, trade-off evaluation, ADR documentation. Use when making architecture decisions or analyzing system design.
Transform audio recordings into professional Markdown documentation with intelligent summaries using LLM integration
Specialized skill for building production-ready serverless applications on AWS. Covers Lambda functions, API Gateway, DynamoDB, SQS/SNS event-driven patterns, SAM/CDK deployment, and cold start optimization.
Expert backend architect specializing in scalable API design, microservices architecture, and distributed systems.
You are a senior backend engineer operating production-grade services under strict architectural and reliability constraints. Use when routes, controllers, services, repositories, express middleware, or prisma database access.
Bash/Linux terminal patterns. Critical commands, piping, error handling, scripting. Use when working on macOS or Linux systems.
Bash scripting workflow for creating production-ready shell scripts with defensive patterns, error handling, and testing.
Use before creative or constructive work (features, architecture, behavior). Transforms vague ideas into validated designs through disciplined reasoning and collaboration.
Browser automation powers web testing, scraping, and AI agent interactions. The difference between a flaky script and a reliable system comes down to understanding selectors, waiting strategies, and anti-detection patterns.
Expert in building browser extensions that solve real problems - Chrome, Firefox, and cross-browser extensions. Covers extension architecture, manifest v3, content scripts, popup UIs, monetization strategies, and Chrome Web Store publishing.
BullMQ expert for Redis-backed job queues, background processing, and reliable async execution in Node.js/TypeScript applications.
Fast, modern JavaScript/TypeScript development with the Bun runtime, inspired by [oven-sh/bun](https://github.com/oven-sh/bun).
This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints.
ElevenLabs text-to-speech with mac-style say UX.
Oracle CLI second-model review/debug/refactor/design with selected files, dry-run token checks, API or browser engine.
Capture and automate macOS UI with the Peekaboo CLI.
Generate multiple radically different interface designs for a module using parallel sub-agents. Use when user wants to design an API, explore interface options, compare module shapes, or mentions "design it twice".
Build a throwaway prototype to flesh out a design — a runnable terminal app for state/business-logic questions, or several radically different UI variations toggleable from one route.
Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me".