Skills
.Work. You
Rest

api-authz-test

Community

Ensure API authorization is enforced

Software Engineering#owasp#api security#authorization testing#api breach#api security assessment
Authorjassics
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill verifies API authorization by testing for object-level, function-level, and property-level authorization, to confirm that each request is authorized for the caller.

Core Features & Use Cases

  • Object-Level Testing: Swap object identifiers to confirm access control at the object level.
  • Function-Level Testing: Test privileged operations as a normal user to uncover potential function-level breaches.
  • Property-Level Testing: Test mass assignment vulnerabilities and over-exposed fields.
  • Tenant Isolation: Ensure proper tenant object isolation in multi-tenant environments.
  • Use Case: A pentester can use this skill to validate the top OWASP API risks on an authorized target, confirming that users cannot access data or operations they shouldn't.

Quick Start

Execute the /api-authz-test:perform-test command to start the API authorization test.

Dependency Matrix

Required Modules

None required

Components

scripts

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: api-authz-test
Download link: https://github.com/jassics/awesome-claude-security/archive/main.zip#api-authz-test

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.