API Security Testing Skill: Verify the Security Boundary from Identity to Object

Review API contracts and sanitized evidence for identity, object access, inputs, errors, and rate limits; prepare checks pending authorization.