Skip to main content

when-building-backend-api-orchestrate-api-development

Orchestrates a comprehensive REST API development workflow using TDD, ensuring quality and reliability through multi-agent coordination.

Install this skill

or
0/100

Security score

The when-building-backend-api-orchestrate-api-development skill was audited on Feb 28, 2026 and we found 50 security issues across 4 threat categories, including 13 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 81

Template literal with variable interpolation in command context

SourceSKILL.md
81```bash
medium line 97

Template literal with variable interpolation in command context

SourceSKILL.md
97```bash
medium line 103

Template literal with variable interpolation in command context

SourceSKILL.md
103```bash
medium line 119

Template literal with variable interpolation in command context

SourceSKILL.md
119```bash
medium line 125

Template literal with variable interpolation in command context

SourceSKILL.md
125```bash
medium line 140

Template literal with variable interpolation in command context

SourceSKILL.md
140```bash
medium line 147

Template literal with variable interpolation in command context

SourceSKILL.md
147```bash
medium line 163

Template literal with variable interpolation in command context

SourceSKILL.md
163```bash
high line 222

Template literal with variable interpolation in command context

SourceSKILL.md
222**Memory Pattern**: `api-development/${API_ID}/phase-2/backend-developer/project-setup`
high line 232

Template literal with variable interpolation in command context

SourceSKILL.md
232**Memory Pattern**: `api-development/${API_ID}/phase-2/database-architect/db-config`
high line 243

Template literal with variable interpolation in command context

SourceSKILL.md
243**Memory Pattern**: `api-development/${API_ID}/phase-2/devops-engineer/ci-config`
medium line 246

Template literal with variable interpolation in command context

SourceSKILL.md
246```bash
medium line 346

Template literal with variable interpolation in command context

SourceSKILL.md
346```bash
medium line 352

Template literal with variable interpolation in command context

SourceSKILL.md
352```bash
medium line 407

Template literal with variable interpolation in command context

SourceSKILL.md
407```bash
medium line 412

Template literal with variable interpolation in command context

SourceSKILL.md
412```bash
medium line 458

Template literal with variable interpolation in command context

SourceSKILL.md
458```bash
medium line 474

Template literal with variable interpolation in command context

SourceSKILL.md
474```bash
high line 531

Template literal with variable interpolation in command context

SourceSKILL.md
531**Memory Pattern**: `api-development/${API_ID}/phase-4/qa-engineer/e2e-results`
high line 542

Template literal with variable interpolation in command context

SourceSKILL.md
542**Memory Pattern**: `api-development/${API_ID}/phase-4/performance-analyst/benchmarks`
high line 564

Template literal with variable interpolation in command context

SourceSKILL.md
564**Memory Pattern**: `api-development/${API_ID}/phase-4/security-specialist/audit-report`
high line 576

Template literal with variable interpolation in command context

SourceSKILL.md
576**Memory Pattern**: `api-development/${API_ID}/phase-4/api-documentation-specialist/docs`
high line 592

Template literal with variable interpolation in command context

SourceSKILL.md
592**Memory Pattern**: `api-development/${API_ID}/phase-4/devops-engineer/runbook`
medium line 634

Template literal with variable interpolation in command context

SourceSKILL.md
634```bash
medium line 640

Template literal with variable interpolation in command context

SourceSKILL.md
640```bash
medium line 671

Template literal with variable interpolation in command context

SourceSKILL.md
671```bash
medium line 711

Template literal with variable interpolation in command context

SourceSKILL.md
711```bash
medium line 739

Template literal with variable interpolation in command context

SourceSKILL.md
739```bash
medium line 770

Template literal with variable interpolation in command context

SourceSKILL.md
770```bash
medium line 781

Template literal with variable interpolation in command context

SourceSKILL.md
781```bash
medium line 822

Template literal with variable interpolation in command context

SourceSKILL.md
822```bash
medium line 829

Template literal with variable interpolation in command context

SourceSKILL.md
829```bash
medium line 836

Template literal with variable interpolation in command context

SourceSKILL.md
836```bash
medium line 842

Template literal with variable interpolation in command context

SourceSKILL.md
842```bash
medium line 853

Template literal with variable interpolation in command context

SourceSKILL.md
853```bash
medium line 881

Template literal with variable interpolation in command context

SourceSKILL.md
881```bash
medium line 910

Template literal with variable interpolation in command context

SourceSKILL.md
910```bash
medium line 986

Template literal with variable interpolation in command context

SourceSKILL.md
986```bash
medium line 1024

Template literal with variable interpolation in command context

SourceSKILL.md
1024```bash
high line 1062

Template literal with variable interpolation in command context

SourceSKILL.md
1062- [ ] `api-development/${API_ID}/phase-1/*` - Planning artifacts
high line 1063

Template literal with variable interpolation in command context

SourceSKILL.md
1063- [ ] `api-development/${API_ID}/phase-2/*` - Setup configurations
high line 1064

Template literal with variable interpolation in command context

SourceSKILL.md
1064- [ ] `api-development/${API_ID}/phase-3/*` - TDD implementation + tests
high line 1065

Template literal with variable interpolation in command context

SourceSKILL.md
1065- [ ] `api-development/${API_ID}/phase-4/*` - Test results + documentation
high line 1066

Template literal with variable interpolation in command context

SourceSKILL.md
1066- [ ] `api-development/${API_ID}/phase-5/*` - Deployment logs + metrics
medium line 660

Curl to non-GitHub URL

SourceSKILL.md
660curl https://api-staging.example.com/health
medium line 944

Curl to non-GitHub URL

SourceSKILL.md
944ERROR_RATE=$(curl -s https://monitoring.example.com/api/error-rate | jq -r '.rate')
medium line 471

Webhook reference - potential data exfiltration

SourceSKILL.md
471- Webhooks (if applicable)
low line 388

Access to .env file

SourceSKILL.md
388const token = jwt.sign({ userId: user.id }, process.env.JWT_SECRET, { expiresIn: '7d' });
low line 660

External URL reference

SourceSKILL.md
660curl https://api-staging.example.com/health
low line 944

External URL reference

SourceSKILL.md
944ERROR_RATE=$(curl -s https://monitoring.example.com/api/error-rate | jq -r '.rate')
Scanned on Feb 28, 2026
View Security Dashboard
Installation guide →