skills.rest
utsavthakur
utsavthakurCOMMUNITY
Explore all skills by this author →
GitHub

api-recon-and-docs

Discover and document API endpoints, schemas, versions, and hidden features.

Updated Jun 11, 2026
Search Tags:#documentation#api#reconnaissance#endpoint discovery#security assessment
One-click install
npx skills add https://github.com/utsavthakur/agenticskills --skill api-recon-and-docs-utsavthakur
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-recon-and-docs
Source: https://github.com/utsavthakur/agenticskills/tree/main/api-recon-and-docs
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill api-recon-and-docs-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps enumerate API endpoints, documentation, versions, and hidden features to facilitate API testing and discovery.

Core Features & Use Cases

  • API Endpoint Discovery: Identifies all reachable API entry points.
  • Schema Extraction: Extracts schemas, optional fields, and role differences.
  • Version Identification: Discovers old versions, mobile paths, GraphQL endpoints, and undocumented parameters.
  • Use Case: Use this Skill to identify potential attack vectors or areas of improvement for an API before conducting a deeper security audit.

Quick Start

Use the api-recon-and-docs skill to enumerate all API endpoints and document them from the target application.

Frequently Asked Questions about api-recon-and-docs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover undocumented API endpoints and hidden parameters?▼

You can discover undocumented API endpoints and hidden parameters by using reconnaissance techniques to enumerate all reachable entry points, identify old versions, mobile paths, and extract schemas from the target application's API surface area.

What is API surface area reconnaissance and when do I need it?▼

API surface area reconnaissance is the process of identifying entry points, documentation, versions, and hidden features of an API. You need it before conducting a deeper security audit to identify potential attack vectors or areas of improvement.

How do I extract API schemas and identify role differences for security assessments?▼

To extract API schemas and identify role differences, parse and analyze the API documentation to surface optional fields, GraphQL endpoints, and undocumented parameters, facilitating comprehensive API testing and discovery.

Can I discover old API versions and mobile paths during endpoint discovery?▼

Yes, during endpoint discovery you can identify old API versions, mobile paths, and GraphQL endpoints by analyzing the target application's API surface area to map out all reachable entry points and documentation.

Do I need specific tools to parse and analyze API documentation for reconnaissance?▼

Yes, API reconnaissance and documentation requires tools for parsing and analyzing API documentation to successfully enumerate endpoints, extract schemas, and identify hidden features during security assessments and development workflows.

Related Skills

Explore More Software Engineering Skills→
ccashwellccashwell
120

audit-recon

Automate initial audit reconnaissance for Solidity projects.

Community
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced
tommymorgantommymorgan
4

API Testing Patterns

Discover and validate REST and GraphQL API endpoints with security checks.

Community
Advanced
yaklangyaklang
1.6k

api-recon-and-docs

Enumerate API endpoints, schemas, versions, and hidden documentation from OpenAPI/Swagger artifacts.

Official
Intermediate