Save this content to: .claude/skills/implement-api-rate-limiting/SKILL.md

# Implement API Rate Limiting

## Workflow

1. Identify actors, endpoints, authentication mode, abuse risk, and expected traffic.
2. Configure named Laravel rate limiters with meaningful keys.
3. Apply throttles at the route or middleware boundary.
4. Return safe error responses without leaking sensitive details.
5. Add tests for allowed requests, exceeded limits, guests, and authenticated users.

## Verification

- Rate limit tests pass.
- Limits are documented for API consumers when public.