Plugin apisec
OWASP API Security Top 10 skills: BOLA detection, auth and RBAC scaffolding, injection checks, security tests, API security review, OpenAPI hardening.
Cara install plugin apisec
Jalankan kedua perintah di dalam Claude Code. Perintah pertama menambahkan marketplace sekali; perintah kedua meng-install plugin.
/plugin marketplace add apisec-inc/apisec-skills
/plugin install apisec@apisec-skillsApa yang ada di dalam apisec
19 bagian dibaca dari file asli plugin tersebut.
Agents 13
Panggil sebagai @agent-apisec:name- @agent-apisec:claude-code:rules:admin-rbac
Tidak ada deskripsi di dalam file.
- @agent-apisec:claude-code:rules:auth-required
Tidak ada deskripsi di dalam file.
- @agent-apisec:claude-code:rules:error-sanitization
Tidak ada deskripsi di dalam file.
- @agent-apisec:claude-code:rules:input-validation
Tidak ada deskripsi di dalam file.
- @agent-apisec:claude-code:rules:ownership-check
Tidak ada deskripsi di dalam file.
- @agent-apisec:codex:AGENTS
Tidak ada deskripsi di dalam file.
- @agent-apisec:copilot:copilot-instructions
Tidak ada deskripsi di dalam file.
- @agent-apisec:gemini:GEMINI
Tidak ada deskripsi di dalam file.
- @agent-apisec:windsurf:rules:admin-rbac
Requires explicit role assertion before executing admin-scoped operations. Prevents privilege escalation and BFLA vulnerabilities.
- @agent-apisec:windsurf:rules:auth-required
Enforces authentication middleware on all API route handlers. Applies to Express, FastAPI, Django, Spring, Go Gin.
- @agent-apisec:windsurf:rules:error-sanitization
Prevents leaking internal error details, stack traces, or database error messages in API responses.
- @agent-apisec:windsurf:rules:input-validation
Requires validation of all user-supplied input before use. Prevents injection, unexpected types, and missing required fields.
- @agent-apisec:windsurf:rules:ownership-check
Requires ownership validation on any endpoint that accesses database records by user-supplied ID. Prevents BOLA/IDOR vulnerabilities.
Skills 6
Claude memuatnya saat tugas sesuai- api-security-review
Performs a structured security assessment of API code against the OWASP API Security Top 10 2023 standards.
- auth-rbac-scaffold
Generates secure authentication patterns and role-based access control systems while detecting OWASP API security vulnerabilities.
- bola-detector
Detects Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities in API endpoints.
- injection-checker
Detects, classifies, and provides fixes for various injection vulnerabilities including SQL, NoSQL, command, and template injection.
- openapi-hardener
Secures API contracts by tightening OpenAPI, JSON Schema, Zod, Joi, and Pydantic definitions to prevent mass assignment and data exposure.
- security-test-generator
Generates adversarial, security-focused test cases for API endpoints to detect vulnerabilities like auth bypass, injection, and privilege escalation.
Menggunakan apisec di Claude Code
Minta agent berdasarkan nama:
@agent-apisec:claude-code:rules:admin-rbac
@agent-apisec:claude-code:rules:auth-requiredSKILL tidak memerlukan command. Claude membacanya saat permintaan Anda sesuai dengan deskripsinya.
Update, matikan, atau hapus
- Update plugin (shell)
- claude plugin update apisec@apisec-skills
- Refresh marketplace
- /plugin marketplace update apisec-skills
- Matikan untuk sementara
- /plugin disable apisec@apisec-skills
- Hapus
- /plugin uninstall apisec@apisec-skills
Skill dalam apisec
Performs a structured security assessment of API code against the OWASP API Security Top 10 2023 standards.
21bintangGenerates secure authentication patterns and role-based access control systems while detecting OWASP API security vulnerabilities.
21bintangDetects Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities in API endpoints.
21bintangDetects, classifies, and provides fixes for various injection vulnerabilities including SQL, NoSQL, command, and template injection.
21bintangSecures API contracts by tightening OpenAPI, JSON Schema, Zod, Joi, and Pydantic definitions to prevent mass assignment and data exposure.
21bintangGenerates adversarial, security-focused test cases for API endpoints to detect vulnerabilities like auth bypass, injection, and privilege escalation.
21bintang
Pertanyaan tentang plugin apisec
Bagaimana cara install plugin apisec?
Di Claude Code, jalankan /plugin marketplace add apisec-inc/apisec-skills, lalu /plugin install apisec@apisec-skills.
Apa saja yang disertakan plugin apisec?
apisec membundel 13 agent, 6 skill.
Agent apa saja yang disertakan dalam apisec?
claude-code/rules/admin-rbac, claude-code/rules/auth-required, claude-code/rules/error-sanitization, claude-code/rules/input-validation, claude-code/rules/ownership-check, codex/AGENTS +7. Panggil salah satunya dengan @agent-apisec:claude-code:rules:admin-rbac.
Bagaimana cara update atau menghapus plugin apisec?
Update dengan claude plugin update apisec@apisec-skills di shell Anda, atau dari tab Installed di /plugin. Hapus dengan /plugin uninstall apisec@apisec-skills.
Apa lisensi untuk plugin apisec?
MIT, sebagaimana dinyatakan dalam manifest plugin.