noir

Scan codebases to discover and catalog API endpoints across web frameworks.

8|1|Updated Jan 19, 2026

Search Tags:#security #reconnaissance #attack surface #noir #api discovery #endpoint scanning

Ready to run

npx skills add https://github.com/igbuend/grimbard --skill noir

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: noir
Source: https://github.com/igbuend/grimbard/tree/main/skills/noir
Command: npx skills add https://github.com/igbuend/grimbard --skill noir

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the discovery of API endpoints and the mapping of an application's attack surface, crucial for security assessments and inventory management.

Core Features & Use Cases

API Endpoint Discovery: Identifies REST, GraphQL, and WebSocket endpoints across various frameworks.
Attack Surface Mapping: Visualizes and catalogs all accessible API routes.
Shadow API Detection: Uncovers undocumented or hidden API endpoints.
Use Case: Before a penetration test, use this Skill to generate a comprehensive list of all API endpoints in a web application, ensuring no entry points are missed.

Quick Start

Use the noir skill to scan the current directory for API endpoints and output the results in SARIF format.

Frequently Asked Questions about noir

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I discover API endpoints in a codebase for security reconnaissance?▼

API endpoint discovery is performed by scanning the codebase to identify and catalog REST, GraphQL, and WebSocket routes across multiple web frameworks, effectively mapping the application's attack surface for security reconnaissance.

What is the best way to find shadow APIs and hidden routes in a web application?▼

The best way to find shadow APIs is by scanning the codebase to uncover undocumented or hidden API endpoints, ensuring no entry points are missed during comprehensive attack surface mapping and inventory management.

Can I export API endpoint scanning results in SARIF or OpenAPI formats?▼

Yes, API endpoint scanning results can be exported in SARIF and OpenAPI formats, alongside JSON, YAML, HAR, and Markdown, enabling comprehensive analysis and seamless integration into security workflows.

Does API discovery scanning work without external dependencies?▼

Yes, API discovery scanning operates without external dependencies, allowing you to directly scan the current directory to generate a comprehensive list of all API endpoints in a web application for immediate security assessment.

When do I need to map my application's attack surface using codebase scanning?▼

You need to map your application's attack surface using codebase scanning before a penetration test to visualize and catalog all accessible API routes, ensuring no undocumented or shadow API entry points are missed.