apishield is an automated security auditor that scans API route definitions for common vulnerabilities like missing authentication, rate limiting gaps, and CORS misconfigurations.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install apishield
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install apishield using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is apishield?
apishield is a robust security tool designed to integrate seamlessly into your development workflow. By performing local, regex-based analysis, it audits API route definitions across multiple popular frameworks including Express, FastAPI, Flask, Django, Rails, and Next.js. This ensures that no code ever leaves your machine while providing deep insights into potential security flaws without compromising privacy.
The tool is essential for developers who want to maintain high security standards without the manual overhead of traditional audits. It helps identify critical issues such as exposed debug endpoints, SQL injection risks, and sensitive data leaks before they reach production. As one of the most effective Openclaw Skills for API hardening, it provides actionable scores and detailed remediation advice to improve your application's security posture.
apishield Use Cases
- Scanning local directories to find API routes missing authentication middleware.
- Auditing Express or FastAPI endpoints for rate-limiting gaps and CORS issues.
- Detecting exposed debug or admin endpoints in production-ready code.
- Generating comprehensive security reports for compliance and internal reviews.
- Automatically checking staged files for vulnerabilities before every git commit.
How apishield Works
- The user specifies a file or directory for analysis via the apishield scan command.
- The system auto-detects the web framework and filters out non-relevant files like node_modules or build artifacts.
- A suite of 20+ security checks is executed against the identified route files using local regex-based pattern matching.
- Findings are categorized by severity (Critical, High, Medium) and mapped to specific line numbers with detailed descriptions.
- A final security score is calculated to determine if the codebase meets the defined safety threshold for CI/CD integration.
apishield Setup
To get started, ensure you have the required system dependencies: git, bash, python3, and jq. For git hook integration, lefthook is also required.
# Install git hooks manager (Pro/Team features)
brew install lefthook
Configure your skill and optional license key in the Openclaw configuration file located at ~/.openclaw/openclaw.json:
{
"skills": {
"entries": {
"apishield": {
"enabled": true,
"apiKey": "YOUR_LICENSE_KEY_HERE",
"config": {
"severityThreshold": "high"
}
}
}
}
}
apishield Data Schema & Taxonomy
apishield organizes its security data into structured reports and metadata tables to provide a clear overview of your API health.
| Component | Format | Description |
|---|---|---|
| Security Findings | Markdown | Detailed list containing file paths, line numbers, severity, and remediation steps. |
| Security Score | Numeric | A 0-100 score where >= 70 is considered passing. |
| API Inventory | Markdown Table | A catalog of all discovered endpoints, HTTP methods, and auth statuses. |
| Compliance Map | Markdown Report | Mapping of findings to the OWASP API Security Top 10 risks. |
apishield Advanced Features
- Automated git pre-commit hooks using lefthook to block insecure code from being committed.
- OWASP Top 10 compliance mapping for enterprise-grade security reporting and gap analysis.
- Comprehensive API inventory generation to help maintain a catalog of all application endpoints.
- Customizable exclusion patterns and severity thresholds via the Openclaw Skills configuration file.
- Completely local scanning architecture that performs offline license validation for maximum privacy.
SKILL.md
Loading
Related Openclaw Skills
AccessLint
AccessLint is a powerful accessibility scanner for Openclaw Skills that detects WCAG 2.1 violations and semantic HTML failures across modern frontend frameworks.
Zi Wei Dou Shu Analysis Engine (zwds-openclaw)
A comprehensive tool for generating and interpreting Zi Wei Dou Shu metaphysical charts via a structured Node.js CLI.
Model Rate Limiter
A request throttling utility designed to prevent AI models from exceeding provider API rate limits.
All to Markdown
A versatile conversion tool that transforms nearly any file format or URL into clean Markdown for seamless LLM processing.
Chevrolet Information Agent
An automated research skill for AI agents to retrieve detailed brand history, market distribution, and competitive analysis for Chevrolet.
Agent Orchestration
A comprehensive framework for spawning, managing, and tracking AI sub-agents through structured prompt engineering and systematic execution.
Featured*
