Safeguarding Digital Assets: Uncovering Security Risks in APIs