Triage API security testing across REST, GraphQL, SOAP, and WebSocket interfaces.
npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill api-sec-langbyyi
Please help me install this Agent Skill. Skill: api-sec Source: https://github.com/langbyyi/CyberStrikeAI-SRC/tree/main/skills/api-sec Command: npx skills add https://github.com/langbyyi/CyberStrikeAI-SRC --skill api-sec-langbyyi
Security teams conducting API security tests waste time figuring out which attack vectors to prioritize across REST, GraphQL, SOAP, and WebSocket interfaces, leading to missed critical vulnerabilities and inefficient testing workflows.
Use the api-sec skill to triage the target REST API at https://target/api and identify the highest-priority API attack vectors to test first.
High-intent search queries and answers about installing and using this skill.
API security triage categorizes observed API surface characteristics to route testers to specialized security workflows. This standardizes entry points for prioritizing asset discovery, object authorization, and token abuse testing.
Comprehensive surface discovery maps the full attack surface by locating OpenAPI/Swagger documentation, hidden API routes, version drift, and undocumented endpoints. It guides testers through systematically identifying exposed API interfaces.
Testing BOLA vulnerabilities requires routing from the standardized triage entry point to specialized object-level authorization workflows. The triage evaluates API type and token usage to prioritize object authorization checks across REST, GraphQL, and SOAP interfaces.
JWT token abuse testing for WebSocket interfaces is supported through specialized API security workflows. The triage process evaluates token usage and API type characteristics to route testers to appropriate token exploitation workflows.
API security triage works with mobile app backends exposing Swagger documentation by first guiding testers to test authentication on discovered endpoints. It then routes to specialized BOLA testing workflows for object-level authorization checks.
giuseppe-trisciuoglioGenerate OpenAPI 3.0 documentation and Swagger UI for Spring Boot 3.x applications.
sayseven7Route API security testing into documentation, authorization, token, and parameter workflows.
AndyAnh174Test REST, SOAP, and GraphQL APIs for vulnerabilities using Burp Suite and Python scripts.
iulianditaIdentify novel security flaws in source code, binaries, and live services.
