security-skill

What problem does it solve? Building secure APIs requires consistent handling of authentication, secrets, input validation, and rate limiting, and mistakes in any of these areas expose applications to attacks. This Skill provides concrete security rules and patterns so generated code follows safe practices by default. ## Core Features & Use Cases - Authentication & Secrets Management: Generate JWT, OAuth, and API key handling with environment-variable-based secrets using python-dotenv and Docker injection. - API Hardening: Apply Pydantic input validation, payload size limits, input sanitization, and generic error responses that avoid leaking internals. - Rate Limiting: Implement gateway-level and Redis-backed distributed rate limiting with 429 responses and Retry-After headers. - Use Case: When scaffolding a new FastAPI endpoint that accepts user data and calls an AI agent, use this Skill to generate token validation, Pydantic schemas, and rate limit configuration in one pass. ## Quick Start Use the security skill to add JWT authentication, Pydantic input validation, and Redis rate limiting to my API endpoint.