skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

enum-graphql

Enumerate GraphQL endpoints, schemas, and authentication requirements for security assessments.

Updated Jul 30, 2026
Search Tags:#graphql#introspection#api-security#enumeration#pentest#schema-mapping
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-graphql
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: enum-graphql
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/enum-graphql
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-graphql

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the complexity of auditing GraphQL APIs by automating the discovery of endpoints, schema structures, and authentication gaps that are often missed during standard REST-based security assessments.

Core Features & Use Cases

  • Surface Mapping: Automatically identifies GraphQL endpoints, introspection availability, and exposed IDEs like GraphiQL or Playground.
  • Security Analysis: Classifies field-level authentication requirements and tests for query-depth vulnerabilities or batching risks.
  • Use Case: During a security assessment, use this skill to map an entire GraphQL schema and identify which mutations are accessible without proper authorization, ensuring no hidden administrative functions are left exposed.

Quick Start

Use the enum-graphql skill to discover the schema and map authentication requirements for the target endpoint at https://api.example.com/graphql.

Frequently Asked Questions about enum-graphql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enumerate a GraphQL API to find exposed endpoints and schema details?▼

GraphQL enumeration automates endpoint discovery, schema introspection, and authentication classification. It maps the API surface area to identify available queries, mutations, and exposed IDEs like GraphiQL during security assessments.

How do I check which GraphQL mutations are accessible without proper authentication?▼

To check authentication requirements, the enumeration process classifies field-level authorization for queries and mutations. It identifies which administrative functions or sensitive data fields remain exposed without proper authentication validation across the schema.

What is GraphQL introspection and when do I need to map it during a pentest?▼

GraphQL introspection queries the schema to reveal underlying data structures and operations. You map it during a pentest to discover hidden administrative functions, assess query-depth vulnerabilities, and identify batching risks.

Does GraphQL enumeration work for finding query-depth vulnerabilities and batching risks?▼

Yes, GraphQL enumeration works for security analysis by testing query-depth vulnerabilities and identifying batching risks. It evaluates the schema structure to detect potential denial-of-service vectors exposed on the API surface.

Can I use this enumeration approach without defined scope and authorization validation?▼

No, you cannot use this enumeration approach without defined scope and authorization validation. The process strictly requires adherence to defined scope, authorization validation, and policy-gated tool execution to ensure compliant security testing.

Related Skills

Explore More Software Engineering Skills→
AcczdyAcczdy
2

testing-api-security-with-owasp-top-10

Assess REST and GraphQL API endpoints for OWASP API Security Top 10 vulnerabilities.

Community
Intermediate
kiwamizamuraikiwamizamurai
7

binary-analysis

Analyze binaries to identify protections, vulnerabilities, and exploit starting points.

Community
Advanced
ArianHobson333ArianHobson333
7

reconnaissance

Identify subdomains, ports, endpoints, APIs, and attack surfaces.

Community
Advanced
AcczdyAcczdy
2

performing-graphql-introspection-attack

Extract GraphQL schemas and test for introspection and batching vulnerabilities.

Community
Intermediate