skills.rest
TravisLeeeeee
TravisLeeeeeeCOMMUNITY
Explore all skills by this author →
GitHub

API Tester

Automate API endpoint validation for correctness, security, and performance.

110|18|Updated Mar 25, 2026
Search Tags:#rate limiting#owasp#security testing#playwright#api testing#contract testing#performance sla
One-click install
npx skills add https://github.com/TravisLeeeeee/awesome-openclaw-personas --skill api-tester-travisleeeeee
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: API Tester
Source: https://github.com/TravisLeeeeee/awesome-openclaw-personas/tree/main/personas/testing/api-tester
Command: npx skills add https://github.com/TravisLeeeeee/awesome-openclaw-personas --skill api-tester-travisleeeeee

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It prevents unreliable API releases by systematically validating that endpoints behave correctly, meet performance SLAs, and resist common security attacks before users are impacted.

Core Features & Use Cases

  • Comprehensive functional validation: verifies CRUD behavior, input validation, error handling, and correct status codes for edge cases.
  • Security-first testing: exercises authentication/authorization checks, input sanitization (e.g., SQL injection attempts), rate limiting/abuse protection, and OWASP API Security Top 10-style coverage.
  • Performance and reliability testing: measures response time targets (including p95-style constraints) and validates behavior under concurrent load and failure scenarios.
  • Contract and integration resilience: validates third-party integrations, ensures backward compatibility across versions, and produces actionable test reports for go/no-go decisions.

Quick Start

Use the API Tester persona to run an endpoint validation pass that checks authentication, attempts injection-style inputs safely, enforces rate limits, and confirms performance stays within your SLA.

Frequently Asked Questions about API Tester

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate API endpoints for functional correctness, security, and SLA compliance?▼

API endpoint validation systematically checks CRUD behavior, OWASP API security, and p95 performance limits to generate CI/CD-ready test suites with explicit go/no-go release reporting.

How do I automate OWASP API security testing for SQL injection and rate limiting abuse?▼

Automated OWASP API security testing exercises authentication, input sanitization against SQL injection, and rate limiting enforcement to validate resistance against the API Security Top 10 attacks.

What is the best way to measure p95 response time targets under concurrent load testing?▼

Load testing measures response time targets under concurrent load and failure scenarios, validating behavior against performance SLA constraints to ensure reliable API releases.

Why does my API release pipeline need explicit go/no-go reporting from automated tests?▼

Explicit go/no-go reporting from automated API tests prevents unreliable releases by systematically proving endpoints meet functional, security, and performance requirements before production impact.

Related Skills

Explore More Software Engineering Skills→
sheriaxsheriax

clerk-backend-api

Manage Clerk resources via the Backend REST API with OpenAPI validation.

Official
Intermediate
DevelopersGlobalDevelopersGlobal
65

ci-cd-pipelines

Automate CI/CD pipelines with quality gates and deployment processes.

Official
Advanced
Svenja-devSvenja-dev
38

e2e-testing

Automate end-to-end browser testing for web applications with Playwright MCP.

Community
Intermediate
vesvietvesviet

performance-profiling

Profile Go microservices with pprof, benchmarks, and load testing.

Community
Advanced