Audit REST and GraphQL API endpoints for authentication and authorization flaws.
npx skills add https://github.com/jtucker9/mystuff --skill api-audit-jtucker9
Please help me install this Agent Skill. Skill: api-audit Source: https://github.com/jtucker9/mystuff/tree/main/skills/security/api-audit Command: npx skills add https://github.com/jtucker9/mystuff --skill api-audit-jtucker9
API endpoints often suffer from authentication gaps, broken access controls, weak input validation, and misconfigurations that expose data or functionality. This Skill provides a structured approach to identify and remediate these issues, mapped to industry security standards.
Run the API audit by following the activation steps and then execute the recommended test commands to evaluate endpoints.
High-intent search queries and answers about installing and using this skill.
You can audit API endpoints by systematically mapping your API inventory and running targeted checks for broken access controls and weak input validation. This Skill provides reproducible test commands to identify and remediate authentication flaws across REST and GraphQL surfaces.
Aligning with the OWASP API Security Top 10 involves checking endpoints against known threat categories like broken object-level authorization and misconfigurations. This Skill guides you through the evaluation process and provides actionable code-level remediation examples for each identified gap.
Yes, this API audit approach supports threat modeling and security evaluation across REST, GraphQL, and mixed API interfaces. It enables you to inventory endpoints and apply consistent validation checks across different environments including development, staging, and production.
The best way to inventory an API surface is through guided threat modeling that catalogs endpoints and evaluates their exposure to input validation issues and misconfigurations. This process satisfies security requirements while producing actionable remediation plans to harden your interfaces.
Yes, the API audit process generates verifiable checks and actionable config-level remediation examples. It translates identified authentication gaps and broken access controls into specific code corrections and test commands to harden your endpoints.
You should perform an API security audit on staging environments before production deployment to identify misconfigurations and authorization gaps safely. This Skill provides validation guidance to run endpoint checks and verify remediations in non-production settings.
VeradelaCruzDefine API requirements and generate OpenAPI or GraphQL schemas.
nagisanzeninAudit application code for OWASP Top 10 vulnerabilities and generate remediation plans.
pacphiIdentify and validate security vulnerabilities in software applications.
SnailSploitTest GraphQL APIs for introspection abuse, injection, and authorization bypasses.
