Agent skill · software engineering · secondsky
api-rate-limiting
Implements API rate limiting using token bucket, sliding window, and Redis-based algorithms to protect against abuse. Use when securing public APIs, implementing tiered access, or preventing denial-of-service attacks.
Why this skill is useful
Provides specific implementations of rate limiting algorithms and middleware for Node.js that the AI wouldn't reliably generate on its own.
What it needs
Requires express-rate-limit, redis installed locally. About 1k tokens when loaded. Last updated 2026-08-06. 204 stars on the source repository.
What this skill does
API Rate Limiting Protect APIs from abuse using rate limiting algorithms with per-user and per-endpoint strategies. Algorithms Algorithm Pros Cons ----------- ------ ------ Token Bucket Handles bursts, smooth Memory per user Sliding Window Accurate Memory intensive Fixed Window Simple Boundary spikes Token Bucket (Node.js) Express Middleware Response Headers Tiered Limits Tier Requests/Hour ------ --------------- Free 100 Pro 1,000 Enterprise 10,000 Best Practices Use Redis for distributed rate limiting Include proper headers in responses Return 429 status with Retry-After Implement tiered limits for different plans Monitor rate limit metrics Test under load
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills secondsky/api-rate-limiting