How do I initialize the OWASP API Security Top 10 Reference + Pytest Attack Suite kit?

Clone the repository with `git clone https://github.com/Umar-444/Techtalks-stack-kits.git`, navigate to `kits/security-owasp-api/`, and hand the bootstrap prompt to your AI coding agent.

Which AI agents support OWASP API Security Top 10 Reference + Pytest Attack Suite?

The kit's rules are automatically transpiled into 6 native formats: Cursor (.cursor/rules/*.mdc), Claude Code (CLAUDE.md), GitHub Copilot (.github/copilot-instructions.md), Cline (.clinerules), OpenAI Codex (CODEX.md), and Antigravity (.agents/rules/*.md).

What security invariants are enforced in OWASP API Security Top 10 Reference + Pytest Attack Suite?

The kit enforces zero plaintext credentials via Gitleaks, parameterized queries, and resource-level authorization policies.

Verified Complete Kit v1.0.0

OWASP API Security Top 10 Reference + Pytest Attack Suite

Executable OWASP API Security Top 10 reference implementation built in FastAPI paired with a runnable pytest attack suite testing every control: BOLA, Broken Auth, BOPB, Rate Limiting, BFLA, and SSRF.

{'name': 'Python', 'version': '3.12+', 'registry': 'pypi.org'} {'name': 'FastAPI', 'version': '0.115+', 'registry': 'pypi.org'}

Agent Bootstrapping

Pre-Wired Rules

Single-source rules compiled to 6 native agent dialects. Transpiled deterministically from rules/source/.

• .cursor/rules/*.mdc

• CLAUDE.md

• .agents/rules/*.md

• .clinerules & CODEX.md

Security Guardrails

Automated Scanners

Invariants asserted in CI before merge. Scanned by Gitleaks and Semgrep AST checkers.

Standard Security Scan Protocol Enabled

Docker Scaffolding

Turnkey Containers

Runnable containers with pre-wired environment variables, healthchecks, and dependency locks.

docker compose up -d

Agent Bootstrap Prompt

Feed this exact prompt into Claude Code, Cursor, Copilot, or Antigravity to anchor the agent:

You are building with the OWASP API Security Top 10 Reference + Pytest Attack Suite kit. Follow rules in AGENTS.md, DESIGN.md tokens, and steps/agent-build-steps.md.