Automate end-to-end API security testing across REST, GraphQL, and gRPC.
npx skills add https://github.com/n4igme/randscript --skill atest
Please help me install this Agent Skill. Skill: atest Source: https://github.com/n4igme/randscript/tree/main/llm/skills/atest Command: npx skills add https://github.com/n4igme/randscript --skill atest
Lightweight API penetration testing framework for REST, GraphQL, and gRPC targets. It enables rapid, phase-driven security assessments without requiring full infrastructure setup.
Provide a base URL and credentials, initialize an atest engagement, and proceed through Phase 1 recon, Phase 2 auth tests, Phase 3 injections, and Phase 4 reporting.
High-intent search queries and answers about installing and using this skill.
Automate API security testing for BOLA and IDOR using a 4-phase workflow that maps endpoints, validates authorization, and runs scripted checks to detect broken object level authorization across REST, GraphQL, and gRPC targets.
The best way to pentest GraphQL and gRPC APIs is a phase-driven assessment that validates AuthN and AuthZ, maps endpoints, and generates structured reports with proof of concepts for data exposure risks.
Start an API pentest engagement by providing a base URL and credentials, initializing the scope, and proceeding sequentially through recon, auth tests, injections, and reporting phase gates.
Yes, automated API security testing requires token management to validate authentication and authorization, test injections, and accurately detect BOLA, IDOR, and data exposure risks across endpoints.
Yes, you can generate structured reports with PoCs for REST API injections automatically by completing the injection and logic testing phase and proceeding to the reporting phase of the workflow.
salmanabdurrahmanEnumerate REST, GraphQL, and gRPC endpoints via schema analysis and active discovery.
MAF2414Identify authorization bypass vulnerabilities in code and API endpoints.
drupadsachaniaCoordinate SOC workflows from alert triage through compliance reporting.
SuperagentsysRun authorized penetration tests using a six-phase workflow and report templates.
