skills.rest
jassics
jassicsCOMMUNITY
Explore all skills by this author →
Website𝕏@jassicsGitHub

example-skill

Assess REST/GraphQL API endpoints against the OWASP API Security Top 10 and produce a ranked findings table.

6|Updated May 30, 2026
Search Tags:#vulnerability assessment#API security#security audit#OWASP Top 10#endpoint testing
One-click install
npx skills add https://github.com/jassics/awesome-claude-security --skill example-skill-jassics
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: example-skill
Source: https://github.com/jassics/awesome-claude-security/tree/main/templates/plugin-template/skills/example-skill
Command: npx skills add https://github.com/jassics/awesome-claude-security --skill example-skill-jassics

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of assessing API endpoints against the OWASP API Top 10, producing a comprehensive findings table to identify security vulnerabilities.

Core Features & Use Cases

  • OWASP API Top 10 Assessment: Evaluate API endpoints against the OWASP API Security Top 10 vulnerabilities.
  • Findings Table Generation: Generate a detailed findings table with ID, Title, Severity, Evidence, and Remediation for each vulnerability.
  • Use Case: Quickly review a REST/GraphQL API for authentication, rate limiting, or schema abuse issues and get a structured list of vulnerabilities to address.

Quick Start

/example-skill:assess-api https://api.example.com

Frequently Asked Questions about example-skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my REST API endpoints against the OWASP Top 10?▼

To test REST API endpoints against the OWASP Top 10, this Skill assesses authentication, rate limiting, and schema abuse issues, then generates a structured findings table with severity, evidence, and remediation steps.

What is an OWASP API security audit and how does it work?▼

An OWASP API security audit evaluates API endpoints for vulnerabilities like authentication flaws and schema abuse. This Skill applies an OWASP-aligned methodology to assess endpoints and produce a ranked vulnerability findings table.

Can I use this to run a security audit on GraphQL APIs?▼

Yes, you can run security audits on GraphQL APIs. The Skill supports endpoint testing for both REST and GraphQL APIs, evaluating them against the OWASP API Security Top 10 to identify vulnerabilities.

How do I generate a vulnerability findings table for API security issues?▼

To generate a vulnerability findings table, the Skill assesses your API endpoints and outputs a detailed report including the ID, Title, Severity, Evidence, and Remediation for each identified OWASP Top 10 vulnerability.

What specific vulnerabilities does an OWASP API security assessment check for?▼

An OWASP API security assessment checks for vulnerabilities outlined in the OWASP API Security Top 10. This Skill specifically focuses on detecting authentication, rate limiting, and schema abuse issues during endpoint testing.

Do I need to provide API credentials to perform an endpoint security assessment?▼

To perform an endpoint security assessment, you provide an API URL endpoint like https://api.example.com. The Skill then evaluates the target API against the OWASP API Top 10 to generate a ranked findings table.

Related Skills

Explore More Software Engineering Skills→
langbyyilangbyyi
96

API Fuzzing for Bug Bounty

Fuzz REST, SOAP, and GraphQL APIs for vulnerabilities.

Community
Intermediate
johngutierrez31johngutierrez31

vulnerability-priority-engine

Score vulnerabilities by exploitability, exposure, impact, and remediation effort.

Community
Intermediate
wgpsecwgpsec
1.6k

api-fuzz

Automate API security testing with endpoint discovery and semantic fuzzing.

Official
Intermediate
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced