skills.rest
coreymaypray
coreymayprayCOMMUNITY
Explore all skills by this author →
GitHub

api-tester

Automate API testing and security validation across REST, GraphQL, and edge functions.

1|Updated Mar 13, 2026
Search Tags:#rls#graphql#performance-testing#api-testing#rest-api#edge-functions#security-testing
One-click install
npx skills add https://github.com/coreymaypray/sloth-skill-tree --skill api-tester-coreymaypray
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-tester
Source: https://github.com/coreymaypray/sloth-skill-tree/tree/main/plugins/maycrest-ops/skills/api-tester
Command: npx skills add https://github.com/coreymaypray/sloth-skill-tree --skill api-tester-coreymaypray

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

API teams struggle to ensure reliability, security, and performance across REST and GraphQL surfaces, edge functions, and third-party integrations. Without automated, repeatable tests, issues slip into production, causing outages, data exposure, and degraded user experience.

Core Features & Use Cases

  • Automated API validation across REST (/rest/v1/), GraphQL (/graphql/v1), and edge functions to detect regressions.
  • Security testing including authentication validation, rate limiting checks, and RLS policy enforcement.
  • Performance and contract testing with deterministic checks suitable for CI pipelines.

Quick Start

Ask the skill to run a full API test suite against your Supabase endpoints and edge functions to validate security, performance, and contract conformance.

Frequently Asked Questions about api-tester

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate API testing for REST, GraphQL, and edge functions?▼

Automated API testing validates endpoints across REST, GraphQL, and edge functions to detect regressions before production. It targets authentication, rate limiting, RLS policy enforcement, and integration testing using Jest, Deno, and Playwright tooling.

What is RLS policy verification and how does it secure Supabase endpoints?▼

RLS policy verification checks Supabase endpoints to ensure row-level security policies are properly enforced. This security testing prevents data exposure by validating that authentication rules restrict unauthorized queries across your database.

Can I use Jest and Playwright for performance testing in a CI pipeline?▼

Yes, Jest and Playwright tooling support performance testing with deterministic checks suitable for CI pipelines. You can run pre-release checks to benchmark API latency and validate endpoint behavior automatically.

Does this API testing approach work with Supabase and third-party services?▼

Yes, integration testing covers Supabase endpoints and third-party services. It validates REST, GraphQL, and edge functions across these integrations to ensure reliability, security, and performance throughout connected systems.

What's the best way to run security testing and rate limiting checks before release?▼

Running a full API test suite against your endpoints validates security, performance, and contract conformance. This approach targets authentication validation and rate limiting checks to catch issues before production deployment.

Related Skills

Explore More Software Engineering Skills→
alunadevalunadev
3

designing-api-principles

Design REST and GraphQL APIs with production best practices for naming, errors, versioning, and documentation.

Community
Advanced
patricio0312revpatricio0312rev
5

deployment-checklist-generator

Generate deployment readiness checklists with pre-deployment checks and approval gates.

Community
Advanced
eleva-labseleva-labs

api-validate

Validate API implementations against OpenAPI specifications and contracts.

Official
Intermediate
raksokraksok

api-security-best-practices

Apply authentication, authorization, input validation, and rate limiting patterns to APIs.

Community
Advanced