prowler-test-api

Test Prowler API endpoints for JSON:API, RLS isolation, Celery tasks, and RBAC.

1|Updated Aug 16, 2025
One-click install
npx skills add https://github.com/professor-moody/cloud-tools --skill prowler-test-api-professor-moody
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prowler-test-api
Source: https://github.com/professor-moody/cloud-tools/tree/main/repos/prowler/skills/prowler-test-api
Command: npx skills add https://github.com/professor-moody/cloud-tools --skill prowler-test-api-professor-moody

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a standardized and robust set of testing patterns for the Prowler API, ensuring the reliability and security of API operations, including data handling, background tasks, and access controls.

Core Features & Use Cases

  • JSON:API Compliance: Enforces correct request/response formats for creating and updating resources.
  • RLS Isolation Testing: Guarantees that data access is strictly limited to the user's tenant, with resources from other tenants returning 404.
  • Celery Task Verification: Provides strategies for testing asynchronous tasks, including mocking and direct execution.
  • RBAC Enforcement: Validates role-based access control for API endpoints.
  • Use Case: When developing a new API endpoint for managing cloud providers, use these patterns to ensure it correctly handles JSON:API payloads, isolates data by tenant, triggers background scan tasks, and enforces appropriate user permissions.

Quick Start

Use the prowler-test-api skill to run all tests in the api directory.

Frequently Asked Questions about prowler-test-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test Row-Level Security isolation in a Django REST Framework multi-tenant API?

To test Row-Level Security isolation in a multi-tenant API, you can apply standardized testing patterns that verify resources from other tenants return 404, ensuring data access is strictly limited to the user's tenant.

What is the best way to test asynchronous Celery tasks in an API testing workflow?

Testing asynchronous Celery tasks in an API workflow involves using standardized strategies like mocking or direct execution to verify background processes deterministically within your test suite.

How do I validate JSON:API compliance for creating and updating API resources?

Validating JSON:API compliance involves enforcing standardized testing patterns that check request and response formats for creating and updating resources, ensuring endpoints handle JSON:API payloads correctly.

Can I enforce Role-Based Access Control validation across my API endpoints?

Yes, you can enforce Role-Based Access Control validation across API endpoints by applying testing patterns that validate role-based permissions, ensuring endpoints reject unauthorized user access.

Does prowler-test-api work without external dependencies for running API tests?

Yes, prowler-test-api operates without external dependencies, providing scripts, references, and assets to run all tests in the api directory directly within your existing environment.