API Security

Not yet reviewedsecurityPrompt / Rule# security # skill # ai

Securing REST and GraphQL APIs.

Not yet reviewed (manual audit pending)

This skill is cataloged from open community sources and has not yet completed full manual verification. Inspect repository code prior to local execution.

Install API Security in Google Antigravity

Antigravity loads skills from .agents/skills/ in your project or ~/.gemini/config/skills/ for all projects (official docs). Full guide

EasiestOption 1: paste this to your Antigravity agent

Install the "API Security" skill for Google Antigravity.
Follow the steps at https://www.antigravityskills.org/install/api-security.md (source: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/api-security).
Before running anything, show me what you will download and whether it includes scripts, and wait for my OK.
Install it into this project (.agents/skills/) unless I say global. When done, check that Antigravity lists it as an installed skill.

The agent reads the install file, shows you what it will download and waits for your OK.

Option 2: install it yourself

1. Download the skill folder
```
git clone --depth 1 https://github.com/sickn33/antigravity-awesome-skills.git /tmp/ag-skills
```
The skill lives in skills/api-security/ of the source repository.
2. Copy it into this project (workspace skill)
```
mkdir -p .agents/skills && cp -r /tmp/ag-skills/skills/api-security .agents/skills/
```
Run from your project root. Antigravity loads workspace skills from .agents/skills/.
3. Or install it for all projects (global skill)
```
mkdir -p ~/.gemini/config/skills && cp -r /tmp/ag-skills/skills/api-security ~/.gemini/config/skills/
```
Global skills live in ~/.gemini/config/skills/. For the Antigravity CLI use ~/.gemini/antigravity-cli/skills/ instead.
4. Check that Antigravity sees it
Antigravity 2.0 app: start a new conversation and ask "What skills do you have?" (the app has no /skills command; typing / and the skill name also finds it). Antigravity CLI: run /skills; in a session that was already open, run /skills reload first. The agent loads the skill when your request matches its description.

Using Claude Code, Cursor or Codex? See other assistants below.

What is API Security?

Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs: discovery, authentication and authorization flaws (BOLA/IDOR, JWT/OAuth), rate-limit testing, and a structured multi-phase methodology.
Description from the upstream SKILL.md

What the API Security SKILL.md covers

✓适用场景
✓10 阶段测试流程
✓工具链
✓参考
✓任务完成自检（声称完成前 MUST 通过）

When to use API Security

1An authorized assessment covers API endpoints and you need a structured discovery-to-report workflow.
2Testing API authentication, authorization, or rate-limiting behavior within an approved scope.

Source and files

Repository: sickn33/antigravity-awesome-skills (MIT)
Original author source: zhaoxuya520/reverse-skill
Upstream risk label: offensive
Added upstream: 2026-08-25
SKILL.md size: 6.8 KB
Files in the skill folder: SKILL.md · references
Listing synced: 2026-10-05 from commit bdacd76

Installation & Setup Guide

Agent Rules / Prompt Setup

RecommendedQuick install command

git clone --depth 1 https://github.com/sickn33/antigravity-awesome-skills.git /tmp/ag-skills && mkdir -p ~/.gemini/config/skills && cp -r /tmp/ag-skills/skills/api-security ~/.gemini/config/skills/ && rm -rf /tmp/ag-skills

▶Step-by-step install

Step 1: Create skills directory

mkdir -p ~/.gemini/config/skills

Step 2: Clone the skills repository

git clone --depth 1 https://github.com/sickn33/antigravity-awesome-skills.git /tmp/ag-skills

Step 3: Copy this skill

cp -r /tmp/ag-skills/skills/api-security ~/.gemini/config/skills/

Step 4: Clean up temporary files

rm -rf /tmp/ag-skills

Security Review Status

Not yet reviewed (manual audit pending)

This skill is cataloged from open community sources and has not yet undergone full manual line-by-line security verification by our team.

Recommended Verification Steps Prior to Execution:

Inspect the source repository files before adding to your local AI tool config.
Avoid passing production API credentials or sensitive filesystem permissions unless explicitly required.
Run initial commands inside a sandboxed terminal or container environment.

Source repository link for manual inspection: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/api-security

Operational Notes & Known Limitations

Known Limitations

•Only run against APIs you are explicitly authorized to test.
•Some checks are intrusive; prefer non-production mirrors when available.

Supported Platforms

antigravityclaudecursor

View Source on GitHub

Keep exploring this topic

Browse the full Antigravity skills directory for more source-linked skills with install steps and static safety reviews.

More security skills #security #skill #ai Use cases

Related Skills

🛡️

Container Security (Snyk)

@snyk

Snyk's container-security skill: scan Docker images for OS and app vulnerabilities via the Snyk MCP server and fix Dockerfiles.

Static reviewinstructions onlyneeds API keynetwork accesswrites files

container-securitydocker

🛡️

Metasploit Framework

@sickn33

Community skill that gives an agent a command reference for the Metasploit penetration-testing framework. It is an offensive-security skill: the upstream file is marked risk: offensive and meant for authorised assessments and lab use only.

Static reviewinstructions onlyoffensive tooloffline

securitymetasploit

🛡️

Secrets Management

@sickn33

Community skill with a short procedure for handling CI/CD secrets safely: Vault, cloud secret managers, GitHub Actions, workload identity and rotation.

Static review

secretsci-cd