skills.rest
jayjpatel9717
jayjpatel9717COMMUNITY
Explore all skills by this author →
GitHub

api-security

Test API security for authentication, authorization, input validation, and rate limiting.

Updated Jun 3, 2026
Search Tags:#authorization#authentication#vulnerability assessment#api testing#api security
One-click install
npx skills add https://github.com/jayjpatel9717/kurukshetra_updated --skill api-security-jayjpatel9717
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-security
Source: https://github.com/jayjpatel9717/kurukshetra_updated/tree/main/squads/pentest/agents/sahdev/skills/api-security
Command: npx skills add https://github.com/jayjpatel9717/kurukshetra_updated --skill api-security-jayjpatel9717

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, jq, python3, pypdf, pdfplumber, pdf2image, hashcat, jwt_tool, ffuf, inql, crackql, batchql, clairvoyance, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a robust framework for testing and analyzing API security, helping you identify and mitigate vulnerabilities in your APIs.

Core Features & Use Cases

  • API Security Testing: Comprehensive testing for vulnerabilities like BOLA, BFLA, mass assignment, rate limiting, and JWT attacks.
  • Methodology Workflow: Detailed guidance for conducting thorough security assessments, including discovery, authentication, authorization, input validation, and rate limiting.
  • Tool Commands: Scripts and command-line tools for automated testing and analysis of APIs.
  • GraphQL-Specific Checks: Specialized checks for GraphQL APIs, including introspection abuse, batching attacks, and query depth limitations.

Quick Start

Use the api-security skill to perform a full security assessment on your API at https://api.example.com.

Frequently Asked Questions about api-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my API for BOLA and mass assignment vulnerabilities?▼

API security testing for BOLA and mass assignment involves executing authorization checks and input validation tests to identify object-level access control flaws. This Skill automates these vulnerability assessments using curl and Python scripts.

What is the best way to perform GraphQL API security testing?▼

GraphQL API security testing checks for introspection abuse, batching attacks, and query depth limitations. This Skill utilizes specialized tools like inql, crackql, and batchql to automate these specific GraphQL vulnerability assessments.

Can I use jwt_tool to test JWT authentication vulnerabilities in my API?▼

Yes, jwt_tool is integrated to test JWT authentication vulnerabilities in your API. The Skill performs comprehensive authentication checks to detect token-based security flaws during the API security assessment.

Do I need curl and jq installed to run automated API security tests?▼

Yes, curl and jq are required dependencies to perform automated API testing and analysis. The Skill relies on these command-line tools alongside Python3 libraries to execute its security assessment scripts.

How do I check if my API has proper rate limiting configured?▼

API rate limiting checks are performed by sending automated requests to the endpoint and analyzing the response patterns for throttling behavior. This Skill incorporates rate limiting tests into its comprehensive security methodology.

Related Skills

Explore More Software Engineering Skills→
zm2231zm2231
9

Z-Audit: Security Audit for Vibe-Coded Projects

Detect tech stacks and scan web applications for security vulnerabilities.

Community
Advanced
devkenidevkeni
1

api-security

Identify and exploit misconfigurations and vulnerabilities across REST, GraphQL, gRPC, and WebSocket APIs.

Community
Advanced
transilienceaitransilienceai
462

web-application-mapping

Coordinate web-application reconnaissance to identify attack surfaces.

Official
Basic
AcczdyAcczdy
2

performing-web-application-penetration-test

Automate web application penetration testing following the OWASP WSTG with Burp Suite.

Community
Advanced