api-rate-limiting

Implements API rate limiting using token bucket, sliding window, and Redis-based algorithms to protect against abuse. Use when securing public APIs, implementing tiered access, or preventing denial-of-service attacks.

1.15x

Quality

89%

Does it follow best practices?

Impact

95%

1.15x

Average score across 3 eval scenarios

Securityby

Passed

No known issues

Evaluation results

90%

20%

Secure a Public REST API with Rate Limiting

Express rate limit middleware setup

Criteria

Without context

With context

express-rate-limit package

100%

windowMs 15 minutes

100%

max 100 requests

standardHeaders enabled

100%

Error message format

100%

Route scoping to /api/

100%

429 status on limit exceeded

100%

Retry-After header

100%

RateLimit response headers

100%

10%

Implement Subscription-Aware API Access Control

Tiered rate limits per subscription plan

Criteria

Without context

With context

Free tier limit

100%

Pro tier limit

100%

Enterprise tier limit

100%

Per-user or per-key limiting

100%

429 on limit exceeded

100%

Retry-After header

100%

RateLimit headers present

100%

Tier selection logic

100%

All three tiers handled

100%

97%

10%

Build a Horizontally Scalable Rate Limiter

Token bucket and Redis distributed limiting

Criteria

Without context

With context

Token Bucket class

83%

100%

Refill logic

100%

consume() returns boolean

62%

Redis as backing store

100%

Per-user rate limiting

100%

X-RateLimit-Limit header

100%

X-RateLimit-Remaining header

100%

X-RateLimit-Reset header

100%

429 with Retry-After

100%

Distributed scalability note

100%

Repository: secondsky/claude-skills
Commit: 90d6bd7

Evaluated: 29 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Secure a Public REST API with Rate Limiting Implement Subscription-Aware API Access Control Build a Horizontally Scalable Rate Limiter

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.