skills.rest
adityaarsharma
adityaarsharmaCOMMUNITY
Explore all skills by this author →
Website𝕏@adityaarsharmaGitHub

orbit-rest-fuzzer

Automate security testing of WordPress plugin REST API endpoints.

2|1|Updated Apr 20, 2026
Search Tags:#vulnerability assessment#security testing#plugin development#REST API#WordPress
One-click install
npx skills add https://github.com/adityaarsharma/orbit --skill orbit-rest-fuzzer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: orbit-rest-fuzzer
Source: https://github.com/adityaarsharma/orbit/tree/main/skills/orbit-rest-fuzzer
Command: npx skills add https://github.com/adityaarsharma/orbit --skill orbit-rest-fuzzer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the security testing of REST API endpoints within WordPress plugins, reducing the time and effort required to identify and mitigate vulnerabilities.

Core Features & Use Cases

  • Endpoint Discovery: Automatically identifies and scans all REST endpoints within a plugin.
  • Security Testing: Performs various tests including malformed payloads, missing authentication, SQL injection, XSS injection, and type juggling.
  • Use Case: Use this Skill to ensure the security of your WordPress REST API endpoints by testing them with malformed data and checking for unauthorized access points.

Quick Start

Run the /orbit-rest-fuzzer skill on your WordPress plugin by executing the following command: PLUGIN_SLUG=my-plugin WP_TEST_URL=http://localhost:8881 bash ~/Claude/orbit/scripts/rest-fuzz.sh

Frequently Asked Questions about orbit-rest-fuzzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate REST API security testing for a WordPress plugin?▼

You can automate REST API security testing by running a fuzzer script that simulates malformed payloads and common attack vectors against your WordPress plugin endpoints to identify vulnerabilities.

What types of WordPress REST API vulnerabilities can automated security testing detect?▼

Automated security testing can detect vulnerabilities in WordPress REST API endpoints including SQL injection, XSS injection, authentication issues, and type juggling by simulating malformed payloads.

Do I need a local WordPress environment to test my plugin's REST endpoints?▼

Yes, you need a running WordPress plugin environment with a accessible test URL to execute the REST endpoint fuzzer and evaluate the security of your plugin's API routes.

Can I automatically discover all REST API endpoints within a WordPress plugin?▼

Yes, the security testing process includes endpoint discovery, which automatically identifies and scans all available REST API endpoints registered by your WordPress plugin.

What is the best way to check for missing authentication on WordPress REST API endpoints?▼

Using a REST API fuzzer is an effective way to check for missing authentication by sending requests to your WordPress plugin endpoints to verify if they allow unauthorized access.

Why does my WordPress REST API endpoint fail the malformed payload security check?▼

Endpoints fail this security check when the fuzzer identifies that improper input validation allows malformed data to trigger SQL injection, XSS, or type juggling vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
raphaelchristiraphaelchristi
43

harness:setup

Configure Harness Evolver, LangSmith, and baseline evaluations for Python projects.

Community
Advanced
a-jay85a-jay85

security-audit

Audit PHP code for SQL injection, XSS, CSRF, and authentication flaws.

Community
Intermediate
adityaarsharmaadityaarsharma
2

orbit-wp-security

Detect security vulnerabilities in WordPress plugin PHP source code via static analysis.

Community
Advanced
AcczdyAcczdy
2

performing-web-application-penetration-test

Automate web application penetration testing following the OWASP WSTG with Burp Suite.

Community
Advanced