Skip to main content

afrexai-api-architect

Facilitates the design, development, and management of production-grade APIs, ensuring quality and security throughout their lifecycle.

Install this skill

or
77/100

Security score

The afrexai-api-architect skill was audited on Mar 3, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 417

Webhook reference - potential data exfiltration

SourceSKILL.md
417| Webhook | 1000/min | Sliding | Incoming webhooks |
low line 574

Webhook reference - potential data exfiltration

SourceSKILL.md
574- [ ] All endpoints require auth (except /health, /docs, public webhooks)
low line 585

Webhook reference - potential data exfiltration

SourceSKILL.md
585- [ ] Webhook endpoints verify signatures
medium line 902

Webhook reference - potential data exfiltration

SourceSKILL.md
902### Webhook Design
medium line 907

Webhook reference - potential data exfiltration

SourceSKILL.md
907- Include webhook ID for deduplication
low line 209

External URL reference

SourceSKILL.md
209- url: https://api.example.com/v1
low line 211

External URL reference

SourceSKILL.md
211- url: https://staging-api.example.com/v1
low line 484

External URL reference

SourceSKILL.md
484BASE="https://api.example.com/v1"
low line 621

External URL reference

SourceSKILL.md
621- https://app.example.com
low line 622

External URL reference

SourceSKILL.md
622- https://admin.example.com
low line 663

External URL reference

SourceSKILL.md
663Link: <https://api.example.com/v2/orders>; rel="successor-version"
Scanned on Mar 3, 2026
View Security Dashboard