api-security-hardening

SKILL.md

Comprehensive security middleware for REST APIs covering authentication, rate limiting, input validation, and attack prevention.

Implements multiple security layers: helmet for HTTP headers, rate limiting, CORS configuration, input sanitization, and XSS/HPP protection

Supports Node.js/Express and Python FastAPI with reference implementations for each framework

Includes JWT-based authentication, input validation with sanitization, and security event logging

Provides best practices guidance covering HTTPS enforcement, error handling, API versioning, and common vulnerability prevention

API Security Hardening

Table of Contents

Overview

When to Use

Quick Start

Reference Guides

Best Practices

Overview

Implement comprehensive API security measures including authentication, authorization, rate limiting, input validation, and attack prevention to protect against common vulnerabilities.

When to Use