api-security-best-practices
Audited by Runlayer on Feb 21, 2026
Malicious tool definition detected
User logs in with credentials 2.
Tool: SKILL.md [2/4] Description: }); // Attack example: // GET /api/users/1' OR '1'='1 // Returns all users!
Tool: SKILL.md [3/4] Description: over HTTP - **Implement Authentication** - Require authentication for protected endpoints - **Validate All Inputs** - Never trust user input - **Use Parameterized Queries** - Prevent SQL injection - **Implement Rate Limiting** - Protect against brute force and DDoS - **Hash Passwords** - Use bcrypt with salt rounds >= 10 - **Use Short-Lived Tokens** - JWT access tokens should expire quickly - **Implement CORS Properly** - Only allow trusted origins - **Log Secur
Description: [API Security Checklist](https://github.com/shieldfy/API-Security-Checklist) --- **Pro Tip:** Security is not a one-time task - regularly audit your APIs, keep dependencies updated, and stay informed about new vulnerabilities!