Setup Rate Limiting
Implement comprehensive API rate limiting with advanced algorithms and user-specific policies
npx claude-code-templates@latest --command setup/setup-rate-limiting Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-23
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
No observations.
Learn more about NVIDIA SkillSpector.
Content
Setup Rate Limiting
Implement comprehensive API rate limiting with advanced control mechanisms: $ARGUMENTS
Current API State
- Framework detection: @package.json or @requirements.txt (Express, FastAPI, Spring Boot, etc.)
- Existing rate limiting: !
grep -r "rate.limit\|throttle\|rateLimit" src/ 2>/dev/null | wc -l - Redis availability: !
redis-cli ping 2>/dev/null || echo "Redis not available" - API endpoints: !
grep -r "route\|endpoint\|@app\\.route" src/ 2>/dev/null | wc -l
Task
Implement production-ready rate limiting system with sophisticated algorithms and user policies:
Rate Limit Type: Use $ARGUMENTS to focus on API rate limiting, authentication limiting, file upload controls, or database access limiting
Rate Limiting Architecture:
- Algorithm Implementation - Token bucket, sliding window, fixed window, leaky bucket algorithms
- User Policies - Tier-based limits, authenticated vs anonymous, user-specific quotas, IP-based controls
- Storage Backend - Redis integration, distributed rate limiting, persistence strategies, failover mechanisms
- Endpoint Configuration - Per-route limits, method-specific rules, dynamic configuration, A/B testing
- Monitoring & Analytics - Usage tracking, abuse detection, performance metrics, alerting systems
- Bypass Mechanisms - Whitelist management, internal request handling, emergency overrides
Advanced Features: Adaptive rate limiting, geo-based controls, API key management, quota systems, abuse prevention.
Production Readiness: High availability, performance optimization, security controls, comprehensive monitoring.
Output: Complete rate limiting system with intelligent policies, comprehensive monitoring, and advanced abuse prevention capabilities.