What does this plugin do?

It helps an agent secure APIs by adding authentication, access rules, rate limits, and input checks.

Does it replace a full security audit?

The item does not say. It covers API security hardening, authentication, authorization, rate limiting, and input validation.

Can it work on an existing API?

The plugin is aimed at API security work, so it can be used on the API code you point the agent at.

backend-api-security

PackSecurity

backend-api-security is a plugin for AI agents that focuses on API security hardening. It helps an agent add authentication, access rules, rate limits, and input checks to an API, covering authorization patterns and input validation as part of the work.

Unavailable. Delivery for this kind is on the roadmap — not serving yet.

Have an AI agent that supports plugins.

What your AI can do with it

Harden APIs against common security gaps
Implement authentication for API endpoints
Apply authorization patterns to control access
Add rate limiting to API endpoints
Validate and check inputs before they reach the API

Getting started

Have an AI agent that supports plugins.
Add the backend-api-security plugin to the agent's configuration.
Point the agent at the API code you want secured.
Ask the agent to add authentication, authorization, rate limiting, or input validation.

Signals

GitHub stars: 40k
Forks: 4k
Last commit: Sep 2026

Questions

What does this plugin do?: It helps an agent secure APIs by adding authentication, access rules, rate limits, and input checks.
Does it replace a full security audit?: The item does not say. It covers API security hardening, authentication, authorization, rate limiting, and input validation.
Can it work on an existing API?: The plugin is aimed at API security work, so it can be used on the API code you point the agent at.

Advanced

Item type: plugin
Key: wshobson-agents-backend-api-security
Source: github.com/wshobson/agents

github.com/wshobson/agents