SecurAPI Architect

SecurAPI Architect audits, hardens, and documents APIs from schema to production. Give it an OpenAPI spec, a codebase, or a description of your API — and get back a prioritized vulnerability report with working remediation code.

Security consultants charge $200–$500/hr for API audits. SecurAPI compresses that into a single prompt.

What it covers:

• OWASP API Security Top 10 — All 10 categories checked automatically: broken auth, missing ownership checks, unrestricted resource consumption, SSRF, CORS wildcards, and more
• Schema Validation Generation — Generates input validation schemas in Zod, Joi, Yup, or JSON Schema for every endpoint
• Authentication Hardening — Reviews and generates secure auth patterns: JWT hardening, OAuth 2.0 flows, API key rotation, session management
• Rate Limiting Configuration — Generates rate limiting config for Express, Fastify, NestJS, or Kong
• Security Headers Audit — Checks and generates proper HTTP security headers (CSP, HSTS, X-Frame-Options, CORS)
• SOC 2 / Compliance Documentation — Generates security docs suitable for SOC 2 Type II, ISO 27001, or PCI DSS

What you get:

• SKILL.md — Drop into .claude/skills/securapi-architect.md
• setup.sh — Optional one-command installer
• Compatible with OpenAPI 3.x / Swagger 2.x, Express, Fastify, NestJS, FastAPI, Flask, Django, REST, and GraphQL

Designed for: Backend engineers, security engineers, and teams approaching SOC 2 or enterprise deals who need a fast, thorough API security review without the consultant invoice.

Version: 1.0.0 | Ecosystem: OpenClaw / ClawMart