Skip to main content

api-tutorial-writer

Creates comprehensive API tutorials and documentation, transforming complex concepts into practical guides for developers.

Install this skill

or
54/100

Security score

The api-tutorial-writer skill was audited on Feb 9, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 44

Template literal with variable interpolation in command context

SourceSKILL.md
44'Authorization': `Bearer ${apiKey}`,
medium line 150

Template literal with variable interpolation in command context

SourceSKILL.md
150const response = await fetch(`https://api.example.com/v1${endpoint}`, {
medium line 153

Template literal with variable interpolation in command context

SourceSKILL.md
153'Authorization': `Bearer ${API_KEY}`,
medium line 164

Template literal with variable interpolation in command context

SourceSKILL.md
164throw new Error(`Validation Error: ${errorData.error.message}`);
medium line 172

Template literal with variable interpolation in command context

SourceSKILL.md
172throw new Error(`API Error: ${errorData.error.message}`);
medium line 33

Curl to non-GitHub URL

SourceSKILL.md
33curl -X GET "https://api.example.com/v1/users" \
medium line 82

Curl to non-GitHub URL

SourceSKILL.md
82curl -X POST "https://api.example.com/v1/tasks" \
low line 41

Fetch to external URL

SourceSKILL.md
41const response = await fetch('https://api.example.com/v1/users', {
low line 33

External URL reference

SourceSKILL.md
33curl -X GET "https://api.example.com/v1/users" \
low line 41

External URL reference

SourceSKILL.md
41const response = await fetch('https://api.example.com/v1/users', {
low line 59

External URL reference

SourceSKILL.md
59redirect_uri = 'https://your-app.com/callback'
low line 60

External URL reference

SourceSKILL.md
60authorization_base_url = 'https://api.example.com/oauth/authorize'
low line 68

External URL reference

SourceSKILL.md
68token_url = 'https://api.example.com/oauth/token'
low line 73

External URL reference

SourceSKILL.md
73response = oauth.get('https://api.example.com/v1/profile')
low line 82

External URL reference

SourceSKILL.md
82curl -X POST "https://api.example.com/v1/tasks" \
low line 105

External URL reference

SourceSKILL.md
105url = "https://api.example.com/v1/tasks"
low line 150

External URL reference

SourceSKILL.md
150const response = await fetch(`https://api.example.com/v1${endpoint}`, {
low line 264

External URL reference

SourceSKILL.md
264req, err := http.NewRequest("POST", "https://api.example.com/v1/tasks", bytes.NewBuffer(jsonData))
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →