Route API security testing into documentation, authorization, token, and parameter workflows.
npx skills add https://github.com/sayseven7/frameseven --skill api-sec-sayseven7
Please help me install this Agent Skill. Skill: api-sec Source: https://github.com/sayseven7/frameseven/tree/main/internal/mcp/skills/api-sec Command: npx skills add https://github.com/sayseven7/frameseven --skill api-sec-sayseven7
This Skill helps you decide how to approach API security testing when a target exposes REST, mobile backend, or GraphQL interfaces. It reduces wasted effort by routing you to the right next step before you dive into deeper authorization, token, or schema-specific analysis.
Use the api-sec skill to determine which API security path to follow first for the target you are testing.
High-intent search queries and answers about installing and using this skill.
Workflow routing directs your API testing toward specialized paths for recon and docs, BOLA and BFLA, JWT and header trust, or GraphQL and batching checks based on the initial triage classification of your target endpoints.
You need to prioritize BOLA and JWT trust checks when a new endpoint set is discovered during a pentest, ensuring structured pre-assessment of object authorization and token abuse scenarios before selecting specialized downstream testing.
This API security routing approach works with mobile backends, GraphQL endpoints, and REST interfaces, specifically mapping schema-abuse and batching scenarios to the appropriate structured pre-assessment workflow for deeper testing.
The best way to approach GraphQL schema abuse and hidden-parameter triage is to classify the issue early, routing schema and batching checks into a dedicated workflow to reduce wasted effort before deeper testing.
sayseven7Discover API endpoints, schemas, versions, and hidden documentation paths.
ok-helloworldRoute API security testing to workflows based on observed target patterns.
AcczdyAssess REST and GraphQL API endpoints for OWASP API Security Top 10 vulnerabilities.
YlikenRoute API security tasks to appropriate deep-dive sub-skills.
