skills.rest
ArianHobson333
ArianHobson333COMMUNITY
Explore all skills by this author →
GitHub

api-portal-discovery

Discover and analyze API portals, OpenAPI specs, and GraphQL endpoints for a domain.

7|1|Updated Apr 14, 2026
Search Tags:#openapi#swagger#developer portal#api discovery#tech stack analysis
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill api-portal-discovery-arianhobson333
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-portal-discovery
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/communitytools/projects/pentest/.claude/skills/techstack-identification/api_portal_discovery
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill api-portal-discovery-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of discovering and analyzing public API portals, developer documentation, and OpenAPI/Swagger endpoints, providing a comprehensive view of the technology stack in use.

Core Features & Use Cases

  • API Portal Discovery: Automates the identification of public API portals and developer documentation.
  • OpenAPI/Swagger Endpoint Identification: Detects and validates OpenAPI/Swagger specifications for APIs.
  • GraphQL Endpoint Detection: Tests for the presence of GraphQL endpoints.
  • Robots.txt Analysis: Extracts API paths from robots.txt files.
  • Developer Portal Analysis: Analyzes discovered developer portals for technical signals.
  • Use Case: When conducting a security assessment or architecture review, this Skill can quickly uncover the APIs and related documentation in use across a domain.

Quick Start

Run the skill on a domain to discover its API portals: api-portal-discovery domain="example.com".

Frequently Asked Questions about api-portal-discovery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover public API portals and OpenAPI endpoints for a specific domain?▼

You can discover public API portals for a domain by running an automated discovery process that identifies API-related subdomains, validates OpenAPI/Swagger specifications, and extracts technical signals from developer documentation.

Can I detect GraphQL endpoints and API paths from robots.txt automatically?▼

Yes, automated API discovery can detect GraphQL endpoints by testing for their presence and extract API paths by analyzing the robots.txt file for a given domain.

What is the best way to analyze a website's tech stack through its developer documentation?▼

Analyzing developer documentation and public API portals is the best way to identify a tech stack, as it extracts technical signals and validates OpenAPI/Swagger specs to provide a comprehensive view of the APIs in use.

Does API portal discovery work for security assessments and architecture reviews?▼

API portal discovery works effectively for security assessments and architecture reviews by quickly uncovering public APIs, GraphQL endpoints, and related developer documentation across a target domain.

How do I validate OpenAPI and Swagger specifications found during API discovery?▼

During API discovery, you validate OpenAPI and Swagger specifications by fetching the detected endpoints and analyzing the developer portal to ensure the technical specifications are accurate and accessible.

Related Skills

Explore More Software Engineering Skills→
transilienceaitransilienceai
462

domain-assessment

Coordinate subdomain discovery and port scanning to build a domain attack surface inventory.

Official
Basic
hffmnnjhffmnnj
39

api-docs

Generate API reference documentation from OpenAPI specs and GraphQL schemas.

Community
Advanced
Kisilev13Kisilev13

hunt-subdomain

Enumerate subdomains, fingerprint providers, and verify takeover vulnerabilities.

Community
Advanced
cpfiffercpfiffer
23

Bluesky Search

Query the ATProtocol public API for Bluesky profiles, posts, and threads.

Community
Intermediate