api-security

Automate API security testing for REST, GraphQL, and custom endpoints.

7|Updated Feb 11, 2026
One-click install
npx skills add https://github.com/valITino/blhackbox --skill api-security-valitino
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-security
Source: https://github.com/valITino/blhackbox/tree/main/.claude/skills/api-security
Command: npx skills add https://github.com/valITino/blhackbox --skill api-security-valitino

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

API security testing is essential to identify and remediate vulnerabilities in modern APIs, preventing data leaks and unauthorized access.

Core Features & Use Cases

  • Discovery & enumeration of REST, GraphQL, and custom endpoints to map attack surfaces.
  • Guided exploitation steps to demonstrate real-world impact with explicit authorization.
  • OWASP alignment to prioritize findings and provide actionable remediation recommendations.

Quick Start

Provide the API base URL and any authentication details to start the security assessment.

Frequently Asked Questions about api-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate API security testing for REST and GraphQL endpoints?

API security testing can be automated by providing the base URL and authentication details to discover, enumerate, and exploit endpoints. This process maps findings to the OWASP API Top 10 to identify vulnerabilities and provide remediation steps.

Can I test authenticated API endpoints for security vulnerabilities?

Yes, API security testing supports both authenticated and unauthenticated scenarios. You need to supply the specific authentication details during setup so the assessment can accurately map the attack surface and identify vulnerabilities across your protected endpoints.

Does proactive API pentesting align findings with the OWASP API Top 10?

Proactive API pentesting aligns discovered vulnerabilities with the OWASP API Top 10. This mapping prioritizes the identified security findings and provides actionable remediation recommendations to prevent data leaks and unauthorized access.

What is required to start an API enumeration and exploitation assessment?

Starting an API enumeration and exploitation assessment requires explicit authorization and the target API base URL. You must also supply any necessary authentication details to allow the automated testing process to safely discover and test endpoints.

Can API security testing be executed safely within an MCP environment?

Yes, API security testing supports safe and auditable execution within MCP environments. This ensures that guided exploitation steps demonstrating real-world impact remain controlled and fully monitored during the endpoint assessment process.