skills.rest
igbuend
igbuendCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

noir

Scan codebases to discover and catalog API endpoints across web frameworks.

8|1|Updated Jan 19, 2026
Search Tags:#security#reconnaissance#attack surface#noir#api discovery#endpoint scanning
One-click install
npx skills add https://github.com/igbuend/grimbard --skill noir
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: noir
Source: https://github.com/igbuend/grimbard/tree/main/skills/noir
Command: npx skills add https://github.com/igbuend/grimbard --skill noir

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the discovery of API endpoints and the mapping of an application's attack surface, crucial for security assessments and inventory management.

Core Features & Use Cases

  • API Endpoint Discovery: Identifies REST, GraphQL, and WebSocket endpoints across various frameworks.
  • Attack Surface Mapping: Visualizes and catalogs all accessible API routes.
  • Shadow API Detection: Uncovers undocumented or hidden API endpoints.
  • Use Case: Before a penetration test, use this Skill to generate a comprehensive list of all API endpoints in a web application, ensuring no entry points are missed.

Quick Start

Use the noir skill to scan the current directory for API endpoints and output the results in SARIF format.

Frequently Asked Questions about noir

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I discover API endpoints in a codebase for security reconnaissance?▼

API endpoint discovery is performed by scanning the codebase to identify and catalog REST, GraphQL, and WebSocket routes across multiple web frameworks, effectively mapping the application's attack surface for security reconnaissance.

What is the best way to find shadow APIs and hidden routes in a web application?▼

The best way to find shadow APIs is by scanning the codebase to uncover undocumented or hidden API endpoints, ensuring no entry points are missed during comprehensive attack surface mapping and inventory management.

Can I export API endpoint scanning results in SARIF or OpenAPI formats?▼

Yes, API endpoint scanning results can be exported in SARIF and OpenAPI formats, alongside JSON, YAML, HAR, and Markdown, enabling comprehensive analysis and seamless integration into security workflows.

Does API discovery scanning work without external dependencies?▼

Yes, API discovery scanning operates without external dependencies, allowing you to directly scan the current directory to generate a comprehensive list of all API endpoints in a web application for immediate security assessment.

When do I need to map my application's attack surface using codebase scanning?▼

You need to map your application's attack surface using codebase scanning before a penetration test to visualize and catalog all accessible API routes, ensuring no undocumented or shadow API entry points are missed.

Related Skills

Explore More Software Engineering Skills→
DojoGenesisDojoGenesis
2

repo-context-sync

Extract repository context via sparse checkout, diff tracking, and summaries.

Community
Advanced
AgentSecOpsAgentSecOps
183

sca-trivy

Scan container images, dependencies, and IaC files for vulnerabilities and misconfigurations.

Official
Advanced
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate
UseAI-proUseAI-pro
70

network-watcher

Audit OpenClaw skill network requests for exfiltration and unauthorized API calls.

Official
Advanced