Derive and test API endpoint invariants to detect business-logic vulnerabilities.
npx skills add https://github.com/enderphan94/pentest-kit --skill property-scan
Please help me install this Agent Skill. Skill: property-scan Source: https://github.com/enderphan94/pentest-kit/tree/main/skills/property-scan Command: npx skills add https://github.com/enderphan94/pentest-kit --skill property-scan
This Skill enables security testers and developers to find business-logic vulnerabilities in API endpoints by automatically deriving and testing invariants.
Run the property-scan skill to test a list of API endpoints for invariant violations using your API URL.
High-intent search queries and answers about installing and using this skill.
You can automate API business-logic vulnerability testing by deriving invariants like round-trip consistency and idempotency, then generating adversarial inputs to verify if API responses violate expected behaviors.
API invariant testing discovers security flaws by establishing expected behavioral rules like ownership boundaries and rate-limit enforcement, then automatically verifying if the API response violates these constraints under adversarial conditions.
Yes, you can automatically detect API rate-limiting and idempotency issues by deriving these specific behaviors as invariants and testing the endpoints with generated adversarial inputs to identify inconsistencies or bypasses.
Yes, testing API endpoints for ownership boundary breaches requires scripting and request logic to effectively derive the expected invariants and generate the adversarial inputs needed to verify compliance.
The best way to find inconsistencies during a security audit is to automatically derive and test API invariants, which identifies potential bypasses and business-logic bugs while increasing assessment coverage and saving manual effort.
hve4638Organize fragmented research notes into structured derivation packages.
abhijeetkakade1234Detect frontend-only validation and permission-check vulnerabilities in web applications.
selcukyucelGenerate structured evaluation datasets with binary rubric scoring for AI outputs.
langbyyiIdentifies high-severity business logic vulnerabilities in web applications.
