LogoClawIndex
CasesSkillsAbout
LogoClawIndex

ClawIndex

OpenClaw Skills & Use Case Index

ClawIndex is an ecosystem-driven index of OpenClaw skills and real-world use cases.

Index

Skills·
Cases

Meta

About·
Disclaimer·
Email·
GitHub
© 2026 ClawIndex All Rights Reserved.

Skills tagged: api-security

Browse skills that share this tag.

  • bola-idor - Broken Object Level Authorization (BOLA/IDOR) Testing
    authorizationbolaidorowasp

    ★ 22 · Updated 2026-09-18

    Identifies and tests Broken Object Level Authorization and Insecure Direct Object Reference vulnerabilities in APIs and web applications.

    ⚙ Map object identifiers across applications⚙ Replay requests using alternate tokens⚙ Test unauthenticated endpoint access
  • javascript-rate-keys - Rate-limit key design for JavaScript and Node.js APIs
    rate-limitingnodejsredisjavascript

    ★ 0 · Updated 2026-09-16

    Designs rate-limit and quota Redis/memory keys for JavaScript/Node APIs, focusing on identity selection, route normalization, low cardinality, and anti-bypass.

    ⚙ Select primary and secondary identity materials⚙ Define normalized route template classes⚙ Construct hierarchical composite rate keys
  • webapp-api-excessive - Assess excessive data exposure in web application APIs
    cybersecurityapi-securityexcessive-data-exposureowasp-api3

    ★ 0 · Updated 2026-09-15

    Identifies excessive data exposure and over-fetching vulnerabilities in API responses using interception proxies and schema analysis.

    ⚙ Intercept API responses⚙ Analyze response schema differences⚙ Extract sensitive fields from JSON
  • api-security-hardening - API Security Hardening
    api-securityauthenticationrate-limitingcors

    ★ 0 · Updated 2026-09-11

    Secure REST APIs with authentication, rate limiting, CORS, input validation, and security middleware.

    ⚙ Secure REST APIs⚙ Implement authentication⚙ Implement rate limiting
  • api-security - API Security Analysis Skill
    api-securitydastowasp-zapvulnerability-scanning

    ★ 0 · Updated 2026-09-09

    Perform automated dynamic API security scanning using OWASP ZAP baseline scan against authorized non-production HTTP API endpoints.

    ⚙ Scan running HTTP API endpoints⚙ Detect injection attack vectors⚙ Detect cross-site vulnerabilities
  • backend-security-coder - Secure Backend Coding Expert
    backend-securitysecure-codingapi-securityauthentication

    ★ 1 · Updated 2026-06-30

    Expert in secure backend coding practices for input validation, authentication, and API security

    ⚙ validate inputs⚙ sanitize inputs⚙ prevent injection
  • laravel-security - Laravel Security Best Practices Guide
    securityweb-securitylaravelphp

    ★ 265,108 · Updated 2026-03-24

    Comprehensive Laravel security guidance covering authentication, validation, CSRF, file uploads, and secure deployment

    ⚙ configure authentication⚙ implement authorization⚙ validate user input
  • Global Validation - Secure Input Validation for Web Applications
    securityvalidationinput-sanitizationweb-application

    ★ 6 · Updated 2026-02-12

    Implement comprehensive input validation on client and server sides to prevent injection attacks

    ⚙ implement input validation⚙ apply allowlists⚙ perform type checking