Api review

Skill MuhammedZohaib/patchman/plugins/patchman/skills/api-review

Defensive AI security audit skill for Claude and Codex. Reviews codebases and web apps for OWASP Top 10, auth and authorization flaws, business logic bugs, tenant isolation gaps, insecure defaults, secret leaks, and ORM or N+1 query issues, then produces clear remediation guidance.

Install

npx -y skills add MuhammedZohaib/patchman --skill api-review

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Review an authorized API surface for access control, mass assignment, schema validation, rate limiting, SSRF, error leakage, webhook verification, and unsafe defaults. Use for REST, GraphQL, RPC, and webhook handlers.

SKILL.md

0.6 KB, as published. Nobody here has run it

API Review

Focus

route, resolver, and webhook authorization
object scoping and tenant filters
request validation and mass assignment
response leakage and error behavior
rate limiting and abuse resistance
server-side fetch and callback verification

Output rule