skills.rest
panlam85
panlam85COMMUNITY
Explore all skills by this author →
GitHub

api-audit

Crawl TheaterOS API endpoints and generate an HTML audit report.

Updated Apr 25, 2026
Search Tags:#security#api#audit#endpoints#curl#health-check#theateros
One-click install
npx skills add https://github.com/panlam85/PAF-Atlas --skill api-audit-panlam85
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-audit
Source: https://github.com/panlam85/PAF-Atlas/tree/main/.claude/skills/api-audit
Command: npx skills add https://github.com/panlam85/PAF-Atlas --skill api-audit-panlam85

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill performs a comprehensive audit of TheaterOS API endpoints, surfacing errors, misconfigurations, and information leaks before they impact users.

Core Features & Use Cases

  • End-to-end endpoint validation across public and authenticated routes, including health, readiness, CSRF, and auth enforcement checks.
  • Automated report generation: an HTML audit in .claude/audits/ and updates to TODO.md with actionable bugs.
  • Guided workflow for weekly or pre-release health checks, with structured findings and remediation guidance.

Quick Start

Run the API audit workflow against your running TheaterOS server to generate a detailed HTML report and a TODO list.

Frequently Asked Questions about api-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit TheaterOS API endpoints for runtime errors and misconfigurations?▼

API endpoint auditing checks public and authenticated routes across all phases to validate health, readiness, auth enforcement, and CSRF behavior. It identifies runtime errors and leaks, generating an HTML report and updating TODO.md with actionable findings.

What is checked during a TheaterOS API health and readiness audit?▼

A TheaterOS API health and readiness audit validates endpoint responses, auth enforcement, and CSRF behavior across all phases. It targets public and authenticated routes to identify information leaks and misconfigurations before they impact users.

How do I generate an API audit report for pre-release health checks?▼

Generating an API audit report requires running the audit workflow against your running TheaterOS server. It saves detailed HTML results to .claude/audits/api-audit-YYYY-MM-DD.html and records actionable bugs in TODO.md for guided remediation.

Can I use curl to check CSRF behavior and auth enforcement on API routes?▼

Yes, curl can be used to check CSRF behavior and auth enforcement on API routes. The audit targets these endpoints across all phases, validating security configurations while deliberately avoiding exposing sensitive data in error outputs.

Does the API audit expose sensitive data when logging endpoint errors?▼

No, the API audit avoids exposing sensitive data when logging endpoint errors. It safely records findings for TODO.md and generates an HTML report, ensuring misconfigurations and runtime errors are surfaced without compromising sensitive information.

Related Skills

Explore More Software Engineering Skills→
clerkclerk
66

clerk-tanstack-patterns

Implement Clerk authenticated routing patterns for TanStack Start apps.

Official
Intermediate
AgustinMadygrafAgustinMadygraf

4a-ports-contract-audit

Audit naming, placement, and dependencies of ports and contracts in src directories and output a report and docs/todo.md.

Community
Intermediate
rlagycksrlagycks
3

canary-watch

Monitor website status, console errors, performance metrics, and key content after deployments.

Community
Intermediate
AgentientAgentient
2

owasp-code-analysis

Detect OWASP Top 10 2021 vulnerabilities in codebases and configurations.

Official
Basic