rest-api
Facilitates the creation of REST API endpoints with comprehensive documentation and support for various HTTP methods and status codes.
Install this skill
or
72/100
Security score
The rest-api skill was audited on Feb 28, 2026 and we found 8 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 213
Template literal with variable interpolation in command context
SourceSKILL.md
| 213 | `API version ${version} not supported`); |
medium line 427
Template literal with variable interpolation in command context
SourceSKILL.md
| 427 | throw new Error(`Geocoder API error: ${response.status}`); |
medium line 733
Template literal with variable interpolation in command context
SourceSKILL.md
| 733 | return `"${hash}"`; |
medium line 849
Template literal with variable interpolation in command context
SourceSKILL.md
| 849 | let cacheControl = `${scope}, max-age=${maxAge}`; |
medium line 851
Template literal with variable interpolation in command context
SourceSKILL.md
| 851 | cacheControl += `, stale-while-revalidate=${staleWhileRevalidate}`; |
low line 231
Fetch to external URL
SourceSKILL.md
| 231 | fetch('/api/users', { |
low line 422
Access to .env file
SourceSKILL.md
| 422 | key: process.env.GEOCODER_API_KEY // Never exposed to client |
low line 419
External URL reference
SourceSKILL.md
| 419 | `https://api.geocoder.example/v1/search?` + |
Scanned on Feb 28, 2026
View Security Dashboard