skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

enum-api-surface

Enumerate REST, GraphQL, and gRPC endpoints via schema analysis and active discovery.

Updated Jul 30, 2026
Search Tags:#security#api#rest#reconnaissance#graphql#pentesting#enumeration
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-api-surface
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: enum-api-surface
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/enum-api-surface
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-api-surface

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the challenge of identifying and auditing hidden or undocumented API endpoints across REST, GraphQL, and gRPC services, ensuring that security assessments are comprehensive and structured.

Core Features & Use Cases

  • Multi-Protocol Discovery: Automatically maps REST, GraphQL, and gRPC endpoints through schema analysis and client-side code extraction.
  • Security Posture Classification: Categorizes endpoints by authentication requirements and identifies potential data exposure risks.
  • Use Case: During a security assessment, use this skill to discover legacy API versions and unauthenticated endpoints that might leak sensitive data before performing deeper vulnerability testing.

Quick Start

Use the enum-api-surface skill to map the API endpoints and authentication requirements for the target base URL provided in the scope file.

Frequently Asked Questions about enum-api-surface

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate API endpoints for REST, GraphQL, and gRPC services?▼

API surface enumeration maps REST, GraphQL, and gRPC endpoints through passive schema analysis and active client-side code extraction. This identifies undocumented endpoints and classifies security posture by mapping authentication requirements and data exposure risks.

What is the best way to discover undocumented or hidden API endpoints during a security assessment?▼

Discovering hidden API endpoints utilizes multi-protocol discovery to automatically map services through schema analysis and client-side code extraction. This reveals legacy API versions and unauthenticated endpoints that might leak sensitive data before deeper vulnerability testing.

Can I map API authentication requirements and data exposure risks automatically?▼

Yes, you can map API authentication requirements and data exposure risks automatically using security posture classification. It categorizes endpoints by authentication needs and identifies potential data exposure risks for triage.

Do I need authorization gates and rate-limiting policies to perform API reconnaissance?▼

Yes, API reconnaissance requires strict adherence to authorization gates, rate-limiting policies, and scope validation protocols. These controls ensure active discovery techniques remain compliant and structured during security assessments.

How do I audit legacy API versions for sensitive data leakage before deep vulnerability testing?▼

You audit legacy API versions for sensitive data leakage by mapping the API surface and categorizing endpoint security posture. This identifies unauthenticated endpoints that might leak sensitive data before performing deeper vulnerability testing.

Related Skills

Explore More Software Engineering Skills→
salmanabdurrahmansalmanabdurrahman

recon-dns

Enumerate DNS records and assess email security for authorized domains.

Community
Advanced
alicangnllalicangnll

Automated Exploit Generation

Generate exploit code for software vulnerabilities using pwnlib, ROPgadget, and shellcode.

Community
Advanced
kiwamizamuraikiwamizamurai
7

networking

Analyze PCAP captures for data exfiltration and protocol misuse.

Community
Intermediate
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate