skills.rest
YukiIto1999
YukiIto1999COMMUNITY
Explore all skills by this author →
GitHub

api-security

Automate API security assessment across GraphQL, REST, WebSocket, and Web-LLM interfaces.

Updated Apr 23, 2026
Search Tags:#testing#vulnerability#graphql#api-security#pentesting#websocket#rest-api
One-click install
npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill api-security-yukiito1999
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-security
Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/api-security
Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill api-security-yukiito1999

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill consolidates API security testing across GraphQL, REST API, WebSocket, and Web-LLM interfaces, reducing manual effort and accelerating vulnerability discovery.

Core Features & Use Cases

  • Discover endpoints and document API surfaces
  • Validate authentication and authorization controls
  • Execute vulnerability tests across API types (BOLA, IDOR, SSRF, injection)
  • Compile evidence and reports for security testing teams
  • Use cases include pentesting microservices in CI/CD and security assessments for cloud-native architectures

Quick Start

Point the skill at your API surface to begin automated security assessment.

Frequently Asked Questions about api-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate API security testing for GraphQL and REST endpoints?▼

You can automate API security testing across GraphQL, REST, and WebSocket interfaces by pointing the assessment tool at your API surface to discover endpoints, map authorization, and execute vulnerability tests like BOLA and SSRF.

What types of API vulnerabilities can I test for during pentesting?▼

API vulnerability testing covers BOLA, IDOR, SSRF, and injection flaws across GraphQL, REST API, and WebSocket interfaces, generating structured evidence reports for security engineering and pentesting teams.

Can I use this for security assessments of cloud-native microservices in CI/CD?▼

Yes, this API security assessment is designed for cloud-native architectures and microservices in CI/CD pipelines, validating authentication and authorization controls while testing REST, GraphQL, and WebSocket interfaces.

How do I validate authentication and authorization controls across WebSocket APIs?▼

Validating authentication and authorization controls across WebSocket APIs involves mapping endpoint surfaces, testing access boundaries, and executing vulnerability tests to identify exposure in real-time communication interfaces.

Does API security testing work without external dependencies?▼

Yes, API security testing operates with no external dependencies, running structured vulnerability assessments and endpoint discovery natively across GraphQL, REST API, and WebSocket interfaces.

Related Skills

Explore More Software Engineering Skills→
narlyseorgnarlyseorg
6

api-pentesting

Identify and assess API security vulnerabilities across REST, GraphQL, gRPC, WebSocket, and SOAP endpoints.

Community
Advanced
jinyimeng01jinyimeng01
54

exploit-agent

Validate suspected web vulnerabilities and generate structured exploit reports.

Community
Advanced
bcastelinobcastelino
2

cloud-devops

Orchestrate cloud infrastructure and DevOps workflows across AWS, Azure, and GCP.

Community
Advanced
langbyyilangbyyi
96

API Fuzzing for Bug Bounty

Fuzz REST, SOAP, and GraphQL APIs for vulnerabilities.

Community
Intermediate