Agent-Skills.md

Agent Skills: Api Platform Security (Symfony)

Secure API Platform resources with security expressions, voters, securityPostValidation, and operation-level access control

UncategorizedID: makfly/superpowers-symfony/api-platform-security

Repository

makfly/superpowers-symfony
dev-toolingsLicense: MIT
21324

Install this agent skill to your local

pnpm dlx add-skill https://github.com/dev-toolings/superpowers-symfony/tree/HEAD/content/skills/api-platform-security

Skill Files

Browse the full folder contents for api-platform-security.

Download Skill

Loading file tree…

content/skills/api-platform-security/SKILL.md

Skill Metadata

Name
api-platform-security
Description
Secure API Platform resources with security expressions, voters, securityPostValidation, and operation-level access control

Api Platform Security (Symfony)

Use when

  • Designing or evolving API Platform contracts and operations.
  • Aligning serialization, validation, and security behavior.

Default workflow

  1. Define operation-level contract and payload boundaries.
  2. Implement resource/DTO/provider/processor changes with explicit mapping.
  3. Apply operation-specific validation and security constraints.
  4. Validate functional behavior across happy and negative paths.

Guardrails

  • Keep API contract explicit and version-aware.
  • Avoid exposing internal entity fields implicitly.
  • Prevent drift between docs and actual serialization.

Progressive disclosure

  • Use this file for execution posture and risk controls.
  • Open references when deep implementation details are needed.

Output contract

  • API artifacts changed (resource/DTO/provider/processor).
  • Contract/security decisions and rationale.
  • Functional verification results.

References

  • reference.md
  • docs/complexity-tiers.md