S
symfony:api-platform-security
About symfony:api-platform-security
A Symfony skill for designing and evolving API Platform contracts and operations. It focuses on explicit payload mapping, operation-specific validation and security, and functional checks across successful and negative paths.
Key features
- 01Define operation contracts and payload boundaries
- 02Update resources, DTOs, providers, and processors
- 03Apply operation-specific validation and security
- 04Verify successful and negative paths
Use cases
- 01Evolving API Platform operations
- 02Aligning serialization, validation, and security behavior
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ dev-toolings/ superpowers-symfony --skill symfony:api-platform-securityAfter installing, type/symfony:api-platform-securityin Claude Code to confirm it loaded.
Bundled filesreference.md
Details
From the project READMEApi Platform Security (Symfony)
Use when
- Designing or evolving API Platform contracts and operations.
- Aligning serialization, validation, and security behavior.
Default workflow
- Define operation-level contract and payload boundaries.
- Implement resource/DTO/provider/processor changes with explicit mapping.
- Apply operation-specific validation and security constraints.
- Validate functional behavior across happy and negative paths.
Guardrails
- Keep API contract explicit and version-aware.
- Avoid exposing internal entity fields implicitly.
- Prevent drift between docs and actual serialization.
Progressive disclosure
- Use this file for execution posture and risk controls.
- Open references when deep implementation details are needed.
Output contract
- API artifacts changed (resource/DTO/provider/processor).
- Contract/security decisions and rationale.
- Functional verification results.
References
reference.mddocs/complexity-tiers.md
Comments
Markdown supported