Route REST APIs and GraphQL endpoints to security testing workflows.
npx skills add https://github.com/utsavthakur/agenticskills --skill api-sec-utsavthakur
Please help me install this Agent Skill. Skill: api-sec Source: https://github.com/utsavthakur/agenticskills/tree/main/api-sec Command: npx skills add https://github.com/utsavthakur/agenticskills --skill api-sec-utsavthakur
The api-sec skill helps in determining the most appropriate security testing workflow for REST APIs, mobile backends, and GraphQL endpoints by providing a routing entry point.
Activate the api-sec skill to start a targeted API security test on your endpoints.
High-intent search queries and answers about installing and using this skill.
To determine an effective API security testing path, you must assess vulnerabilities like object authorization, token abuse, and hidden parameters before executing specific tests. A structured routing approach helps triage these issues to specialized testing workflows.
Start a GraphQL security assessment by using a routing entry point to evaluate aspects like object authorization and token abuse. This provides a decision matrix to route endpoints to the appropriate targeted testing workflow.
You can use a single routing entry point to decide between security testing workflows for both REST APIs and mobile backends. It offers a skill map to guide authorization, recon, and token abuse testing across these platforms.
Check for object authorization and token abuse by following a recommended structured testing flow. This approach assesses various security aspects and hidden parameters first, ensuring you apply the correct specific API tests afterward.
Yes, API security testing requires assessing hidden parameters, object authorization, and token abuse before applying specific tests. This preliminary assessment determines the most effective testing path and routes issues to the correct workflow.
YukiIto1999Automate API security assessment across GraphQL, REST, WebSocket, and Web-LLM interfaces.
ok-helloworldTest API object ID and hidden field authorization across roles.
ricardoo022Fuzz target URLs with wordlists to discover hidden API endpoints and parameters.
langbyyiTriage API security testing across REST, GraphQL, SOAP, and WebSocket interfaces.
