test-api-security

Automate API security testing for REST and GraphQL endpoints.

36|10|Updated Feb 5, 2026

Search Tags:#testing #authorization #authentication #api-security #playwright-mcp #vulnerability-scanning

Ready to run

npx skills add https://github.com/jie023/trae-setting --skill test-api-security

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: test-api-security
Source: https://github.com/jie023/trae-setting/tree/main/skills/test-api-security
Command: npx skills add https://github.com/jie023/trae-setting --skill test-api-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates API security testing to verify access controls and identify vulnerabilities that could be exploited in production environments.

Core Features & Use Cases

Authentication & Authorization Testing: Validate that only authorized users can access protected endpoints and that roles enforce correct permissions.
Vulnerability Assessment: Detect common API security issues such as injection, misconfigurations, and insecure data handling.
Audit & Reporting: Produce Markdown-based reports suitable for security reviews and compliance checks.

Quick Start

Run a Playwright MCP-based test suite against your API endpoints to validate security controls.

Frequently Asked Questions about test-api-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate API security testing for authentication and authorization vulnerabilities?▼

Automating API security testing verifies access controls and identifies vulnerabilities by executing Playwright MCP-based test suites against your endpoints to validate authentication and authorization rules.

What is automated API security testing for REST and GraphQL APIs?▼

Automated API security testing for REST and GraphQL APIs assesses authentication, authorization, and vulnerability risks to ensure protected endpoints enforce correct permissions and prevent unauthorized access.

Can I perform a security audit on GraphQL APIs using Playwright MCP?▼

Yes, you can perform a security audit on GraphQL APIs using Playwright MCP to execute test suites that detect misconfigurations, injection flaws, and insecure data handling.

How do I generate reproducible security audit reports for API access controls?▼

You generate reproducible security audit reports by running automated API security tests that produce Markdown-based documentation of findings, ensuring results are auditable for compliance checks.

What is the best way to test role-based access control vulnerabilities in APIs?▼

The best way to test role-based access control vulnerabilities in APIs is to automate authentication and authorization test suites that validate whether specific roles enforce correct endpoint permissions.

What types of API vulnerabilities can automated security testing detect?▼

Automated API security testing detects common vulnerabilities including injection attacks, security misconfigurations, insecure data handling, and broken authentication or authorization controls.