api-security

Analyze REST, GraphQL, WebSocket, and Web-LLM APIs for vulnerabilities.

7|1|Updated Apr 14, 2026
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill api-security-arianhobson333
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-security
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/communitytools/projects/pentest/.claude/skills/api-security
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill api-security-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires graphql-api-tester, requests, requests_toolbelt, urllib3, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive approach to API security, addressing common vulnerabilities and ensuring robust protection against potential threats.

Core Features & Use Cases

  • API Security Testing: Offers a suite of techniques to test REST, GraphQL, WebSocket, and Web-LLM APIs for vulnerabilities.
  • Endpoint Discovery: Identifies exposed API endpoints and documentation.
  • Vulnerability Analysis: Checks for common security issues such as broken authentication, injection flaws, and data exposure.
  • Use Case: Ideal for security analysts and developers looking to assess the security posture of their APIs, ensuring compliance with industry standards.

Quick Start

Run the 'api-security' skill to begin scanning your API for vulnerabilities.

Frequently Asked Questions about api-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my REST and GraphQL APIs for security vulnerabilities?

You can test REST and GraphQL APIs for security vulnerabilities using this Skill's comprehensive framework, which checks for broken authentication, injection flaws, and data exposure. It also supports WebSocket and Web-LLM attack analysis.

What is the best way to discover exposed API endpoints and documentation?

Endpoint discovery is handled directly by this API security framework, which scans your application to identify exposed API endpoints and available documentation, helping you map your attack surface effectively.

Does this API security testing framework work with GraphQL and WebSocket protocols?

Yes, this API security testing framework works with GraphQL and WebSocket protocols, alongside REST and Web-LLM APIs. It requires specific libraries like graphql-api-tester and requests to perform this specialized vulnerability analysis.

How do I scan my API for broken authentication and injection flaws?

To scan your API for broken authentication and injection flaws, run the api-security Skill to initiate vulnerability analysis. It evaluates your API endpoints to detect common security issues and data exposure risks.

Do I need specific Python libraries to perform GraphQL and REST API vulnerability testing?

Yes, you need specific Python libraries including graphql-api-tester, requests, requests_toolbelt, and urllib3 to perform GraphQL and REST API vulnerability testing. These dependencies power the endpoint discovery and analysis components.