api-sec

Route API security testing by evaluating endpoint characteristics and traffic patterns to automatically select the appropriate sub-skill, guiding AI agents from initial discovery to targeted authorization or JWT abuse testing.

Triage API security testing for GraphQL and REST endpoints by using a structured Skill Map that separates object and data access concerns into distinct routing paths for safe, structured exploration.

API security routing handles hidden parameter discovery and BOLA vulnerabilities by directing AI agents to a dedicated hidden-parameter scenario track after initial recon and docs evaluation is completed.

Yes, you can use this API security routing for mobile backends and GraphQL endpoints, as it applies structured triage across both environments to identify token abuse and authorization flaws.

You need to separate object and data access concerns during API security testing when an endpoint exposes distinct authorization paths, requiring structured routing to ensure safe and targeted vulnerability exploration.