skills.rest
jassics
jassicsCOMMUNITY
Explore all skills by this author →
Website𝕏@jassicsGitHub

owasp-api-top10

Assess REST or GraphQL APIs against the OWASP API Security Top 10.

6|Updated May 30, 2026
Search Tags:#owasp#security audit#pentesting#api security#api assessment
One-click install
npx skills add https://github.com/jassics/awesome-claude-security --skill owasp-api-top10
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: owasp-api-top10
Source: https://github.com/jassics/awesome-claude-security/tree/main/plugins/api-security/skills/owasp-api-top10
Command: npx skills add https://github.com/jassics/awesome-claude-security --skill owasp-api-top10

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill assesses REST or GraphQL APIs against the OWASP API Security Top 10, providing a structured finding set with severity and remediation, useful for reviewing or pentesting APIs.

Core Features & Use Cases

  • OWASP API Security Assessment: Analyze API security against the OWASP API Security Top 10 categories.
  • Detailed Findings: Get a per-category finding set with severity and remediation.
  • Use Case: When reviewing or pentesting an API, use this Skill to identify potential security vulnerabilities and their solutions.

Quick Start

Assess the security of your API by running the owasp-api-top10 skill.

Frequently Asked Questions about owasp-api-top10

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assess my REST API against the OWASP API Security Top 10?▼

To assess a REST API against the OWASP API Security Top 10, analyze your API endpoints, authentication, and authorization mechanisms to generate a structured report of findings, severity levels, and remediation steps.

What is an OWASP API security assessment and how does it work?▼

An OWASP API security assessment evaluates REST or GraphQL APIs against the OWASP API Security Top 10 categories. It analyzes endpoint vulnerabilities and authorization flaws to produce a structured finding set with severity and remediation guidance.

Can I use this to perform a security audit on GraphQL APIs?▼

Yes, you can perform a security audit on GraphQL APIs. The assessment evaluates GraphQL endpoints alongside REST APIs against the OWASP API Security Top 10 to identify vulnerabilities and provide structured remediation reports.

How do I get structured findings and remediation steps for API pentesting?▼

To get structured findings and remediation steps for API pentesting, evaluate your API against the OWASP API Security Top 10 categories. This generates a detailed report categorizing vulnerabilities by severity and offering specific solutions.

What is the best way to review API authorization mechanisms for vulnerabilities?▼

The best way to review API authorization mechanisms for vulnerabilities is to assess them against the OWASP API Security Top 10. This approach identifies broken object level authorization and other flaws, providing a structured report on severity and remediation.

Related Skills

Explore More Software Engineering Skills→
pluginagentmarketplacepluginagentmarketplace
3

api-documentation

Generate OpenAPI, AsyncAPI, or Protobuf specifications and Markdown or HTML documentation.

Community
Advanced
amdmaxamdmax
2

security-review

Audit code changes against OWASP Top 10 and API Security Top 10 standards.

Community
Advanced
trilwutrilwu
109

testing-apis

Identify and exploit API security weaknesses across REST and GraphQL endpoints.

Community
Advanced
ToanPV90ToanPV90

sast-scanning

Detects source code vulnerabilities via static analysis with JSON/SARIF outputs.

Community
Advanced