api-patterns

Malicious tool definition detected

Tool: SKILL.md Description: --- name: api-patterns description: API design principles and decision-making.

Malicious tool definition detected

Tool: api-style.md Description: # API Style Selection (2025) > REST vs GraphQL vs tRPC - Hangi durumda hangisi?

Malicious tool definition detected

Tool: auth.md Description: # Authentication Patterns > Choose auth pattern based on use case.

Malicious tool definition detected

Tool: documentation.md Description: # API Documentation Principles > Good docs = happy developers = API adoption.

Malicious tool definition detected

Tool: graphql.md Description: # GraphQL Principles > Flexible queries for complex, interconnected data.

Malicious tool definition detected

Tool: rate-limiting.md Description: # Rate Limiting Principles > Protect your API from abuse and overload.

Malicious tool definition detected

Tool: response.md Description: # Response Format Principles > Consistency is key - choose a format and stick to it.

Malicious tool definition detected

Tool: rest.md Description: # REST Principles > Resource-based API design - nouns not verbs.

Malicious tool definition detected

passed.append("[OK] Error handling present") else: issues.append("[X] No error handling found") # Check for status codes status_patterns = [ r'status\s*\(\s*\d{3}\s*\)', r'statusCode\s*[=:]\s*\d{3}', r'HttpStatus\.', r'status_code\s*=\s*\d{3}', r'\.status\(\d{3}\)', r'res\.status\(' ] has_status = any(re.search(p, content) for p in status_patterns) if has_status: passed.append("[OK] HTTP status codes used") else: issues.append("[!] No explicit HTTP status codes") # Check for validation validatio

Malicious tool definition detected

--- ## GraphQL Security | Test | Focus | |------|-------| | Introspection | Schema disclosure | | Batching | Query DoS | | Nesting | Depth-based DoS | | Authorization | Field-level access | --- ## Security Testing Checklist **Authentication:** - [ ] Test for bypass - [ ] Check credential strength - [ ] Verify token security **Authorization:** - [ ] Test BOLA/IDOR - [ ] Check privilege escalation - [ ] Verify function access **Input:** - [ ] Test all parameters - [ ] Check for injection **Config: