API Tester

Test API endpoints for functional correctness, security vulnerabilities, and performance SLA compliance.

2|Updated May 21, 2026
One-click install
npx skills add https://github.com/tcvdog/agency-agents-hermes --skill api-tester-tcvdog
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: API Tester
Source: https://github.com/tcvdog/agency-agents-hermes/tree/main/testing/api-tester
Command: npx skills add https://github.com/tcvdog/agency-agents-hermes --skill api-tester-tcvdog

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? APIs often ship without thorough validation, leading to security vulnerabilities, performance regressions, and broken integrations reaching production. This Skill provides a structured methodology for comprehensive API testing covering functional, security, and performance dimensions. ## Core Features & Use Cases - Functional Test Automation: Build automated test suites targeting 95%+ endpoint coverage with frameworks like Playwright, REST Assured, and k6. - Security Validation: Test authentication, authorization, input sanitization, rate limiting, and the OWASP API Security Top 10 vulnerabilities. - Performance Testing: Execute load, stress, and concurrency tests against SLA targets such as sub-200ms 95th percentile response times. - Use Case: Before releasing a new microservice, use this Skill to generate a full test suite validating every endpoint, run load tests at 10x normal traffic, and produce a go/no-go release readiness report. ## Quick Start Ask the agent to design and run a comprehensive functional, security, and performance test plan for your REST API endpoints and produce a release readiness report.

Frequently Asked Questions about API Tester

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test REST API endpoints automatically?▼

Use frameworks like Playwright, REST Assured, or k6 to build automated test suites covering all endpoints. Structure tests into functional, security, and performance groups, then integrate them into your CI/CD pipeline with quality gates.

What security tests should an API pass before release?▼

An API should be validated against the OWASP API Security Top 10, including authentication and authorization checks, SQL injection and XSS prevention, rate limiting enforcement, and encrypted data transmission. Requests without valid tokens must return 401 responses.

How do I load test an API for performance SLA compliance?▼

Run load tests simulating up to 10x normal traffic and measure 95th percentile response times against targets like 200ms. Use concurrent request batches to verify error rates stay below 0.1% under expected load.

Can API tests be integrated into a CI/CD pipeline?▼

Yes, automated API test suites can run as pipeline quality gates that block deployments on failures. Contract testing also ensures backward compatibility across service versions during continuous delivery.

Why does API rate limiting testing matter?▼

Rate limiting tests confirm the API rejects abuse by returning 429 responses after threshold breaches. Without this validation, endpoints remain exposed to denial-of-service attacks and resource exhaustion in production.