apisec 플러그인
OWASP API Security Top 10 skills: BOLA detection, auth and RBAC scaffolding, injection checks, security tests, API security review, OpenAPI hardening.
apisec 플러그인 설치 방법
두 명령을 모두 Claude Code 안에서 실행하십시오. 첫 번째는 마켓플레이스를 한 번 추가하고, 두 번째는 플러그인을 설치합니다.
/plugin marketplace add apisec-inc/apisec-skills
/plugin install apisec@apisec-skillsapisec 구성 요소
플러그인 파일에서 읽어온 19개의 항목입니다.
Agents 13
@agent-apisec:name 으로 호출- @agent-apisec:claude-code:rules:admin-rbac
파일에 설명이 없습니다.
- @agent-apisec:claude-code:rules:auth-required
파일에 설명이 없습니다.
- @agent-apisec:claude-code:rules:error-sanitization
파일에 설명이 없습니다.
- @agent-apisec:claude-code:rules:input-validation
파일에 설명이 없습니다.
- @agent-apisec:claude-code:rules:ownership-check
파일에 설명이 없습니다.
- @agent-apisec:codex:AGENTS
파일에 설명이 없습니다.
- @agent-apisec:copilot:copilot-instructions
파일에 설명이 없습니다.
- @agent-apisec:gemini:GEMINI
파일에 설명이 없습니다.
- @agent-apisec:windsurf:rules:admin-rbac
Requires explicit role assertion before executing admin-scoped operations. Prevents privilege escalation and BFLA vulnerabilities.
- @agent-apisec:windsurf:rules:auth-required
Enforces authentication middleware on all API route handlers. Applies to Express, FastAPI, Django, Spring, Go Gin.
- @agent-apisec:windsurf:rules:error-sanitization
Prevents leaking internal error details, stack traces, or database error messages in API responses.
- @agent-apisec:windsurf:rules:input-validation
Requires validation of all user-supplied input before use. Prevents injection, unexpected types, and missing required fields.
- @agent-apisec:windsurf:rules:ownership-check
Requires ownership validation on any endpoint that accesses database records by user-supplied ID. Prevents BOLA/IDOR vulnerabilities.
Skills 6
작업이 일치하면 Claude가 로드합니다- api-security-review
Performs a structured security assessment of API code against the OWASP API Security Top 10 2023 standards.
- auth-rbac-scaffold
Generates secure authentication patterns and role-based access control systems while detecting OWASP API security vulnerabilities.
- bola-detector
Detects Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities in API endpoints.
- injection-checker
Detects, classifies, and provides fixes for various injection vulnerabilities including SQL, NoSQL, command, and template injection.
- openapi-hardener
Secures API contracts by tightening OpenAPI, JSON Schema, Zod, Joi, and Pydantic definitions to prevent mass assignment and data exposure.
- security-test-generator
Generates adversarial, security-focused test cases for API endpoints to detect vulnerabilities like auth bypass, injection, and privilege escalation.
Claude Code에서 apisec 사용하기
이름으로 agent를 요청하세요:
@agent-apisec:claude-code:rules:admin-rbac
@agent-apisec:claude-code:rules:auth-requiredSkills는 명령어가 필요하지 않습니다. 요청이 설명과 일치하면 Claude가 이를 읽습니다.
업데이트, 비활성화 또는 삭제
- 플러그인 업데이트 (shell)
- claude plugin update apisec@apisec-skills
- marketplace 새로고침
- /plugin marketplace update apisec-skills
- 일시적으로 비활성화
- /plugin disable apisec@apisec-skills
- 삭제
- /plugin uninstall apisec@apisec-skills
apisec의 스킬
Performs a structured security assessment of API code against the OWASP API Security Top 10 2023 standards.
21스타Generates secure authentication patterns and role-based access control systems while detecting OWASP API security vulnerabilities.
21스타Detects Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR) vulnerabilities in API endpoints.
21스타Detects, classifies, and provides fixes for various injection vulnerabilities including SQL, NoSQL, command, and template injection.
21스타Secures API contracts by tightening OpenAPI, JSON Schema, Zod, Joi, and Pydantic definitions to prevent mass assignment and data exposure.
21스타Generates adversarial, security-focused test cases for API endpoints to detect vulnerabilities like auth bypass, injection, and privilege escalation.
21스타
apisec 플러그인 질문
apisec 플러그인은 어떻게 설치하나요?
Claude Code에서 /plugin marketplace add apisec-inc/apisec-skills를 실행한 다음 /plugin install apisec@apisec-skills을 실행하십시오.
apisec 플러그인에는 무엇이 포함되나요?
apisec은(는) 13개 에이전트, 6개 스킬을(를) 묶습니다.
apisec에는 어떤 agent가 포함되어 있나요?
claude-code/rules/admin-rbac, claude-code/rules/auth-required, claude-code/rules/error-sanitization, claude-code/rules/input-validation, claude-code/rules/ownership-check, codex/AGENTS +7입니다. @agent-apisec:claude-code:rules:admin-rbac로 호출하세요.
apisec 플러그인을 어떻게 업데이트하거나 삭제하나요?
shell에서 claude plugin update apisec@apisec-skills를 사용하여 업데이트하거나 /plugin의 Installed 탭에서 수행하세요. 삭제하려면 /plugin uninstall apisec@apisec-skills을 사용하세요.
apisec 플러그인의 라이선스는 무엇인가요?
플러그인 manifest에 명시된 대로 MIT입니다.