Route API security testing to the appropriate workflow based on observed endpoint signals.
npx skills add https://github.com/lNwNl/Methodos --skill api-sec-lnwnl
Please help me install this Agent Skill. Skill: api-sec Source: https://github.com/lNwNl/Methodos/tree/main/docker/opencode/skills/api-sec Command: npx skills add https://github.com/lNwNl/Methodos --skill api-sec-lnwnl
api-sec removes the guesswork of choosing the correct API security workflow by routing you to the most relevant topic based on what you observe in the target.
/graphql endpoints into the appropriate deeper skill path.Use api-sec when you see an API target with Swagger/OpenAPI docs to decide the first deeper skill to run for API recon and documentation-based security discovery.
High-intent search queries and answers about installing and using this skill.
API security triaging routes your testing to the correct workflow by analyzing endpoint signals like OpenAPI docs, BOLA identifiers, or GraphQL endpoints. This observation-driven approach determines whether to pursue recon, authorization, token abuse, or hidden-parameter tracks.
Start API security testing by using exposed Swagger or OpenAPI documentation to select the first deeper skill. This routing process establishes an ordered exploration strategy, progressing from exposed endpoints to authorization boundaries and token checks.
Identify BOLA or JWT abuse testing paths by observing object identifiers and visible tokens in requests. The triage rules map these concrete signals to the appropriate authorization or token abuse workflow before executing deeper assessments.
API security routing works for REST, mobile backend, and GraphQL testing scenarios. It evaluates visible indicators like /graphql endpoints or hidden parameters to set the exploration order across the relevant security testing tracks.
Use an API security triage routing workflow when you need to set the exploration order for a target API. It is required when the first decision must route testing across recon, authorization, token abuse, and hidden-parameter tracks based on observed signals.
ArianHobson333Discover and analyze API portals, OpenAPI specs, and GraphQL endpoints for a domain.
yaklangRoute API security assessments to focused testing workflows based on observed indicators.
yhy0Identify and guide exploitation of memory corruption vulnerabilities in native applications.
ice-droid-99Run Databricks CLI operations with OAuth authentication and explicit profile selection.