Identify and exploit API security weaknesses across REST and GraphQL endpoints.
npx skills add https://github.com/trilwu/secskills --skill testing-apis
Please help me install this Agent Skill. Skill: testing-apis Source: https://github.com/trilwu/secskills/tree/main/secskills/skills/api-security-testing Command: npx skills add https://github.com/trilwu/secskills --skill testing-apis
REST and GraphQL API testing to identify authentication bypass, authorization flaws, IDOR, mass assignment, injection, and rate-limiting weaknesses across services.
Initiate API security testing by specifying a target API and requesting endpoint discovery, vulnerability probing, and documentation review.
High-intent search queries and answers about installing and using this skill.
API security testing for REST and GraphQL involves identifying authentication bypass, authorization flaws, IDOR, mass assignment, injection, and rate-limiting weaknesses across services through endpoint discovery and payload probing.
Finding IDOR and mass assignment flaws in microservices requires horizontal and vertical privilege escalation testing, validating function-level access controls, and fuzzing inputs to detect excessive data exposure across service endpoints.
API pentesting applies directly to cloud-native apps, microservice security testing, and web services requiring authenticated sessions, validating input validation and rate limiting across distributed REST and GraphQL endpoints.
The best way to perform GraphQL introspection and vulnerability probing is to execute payload-based testing checks against the schema, probing for excessive data exposure and authorization weaknesses within the queries.
API documentation analysis helps discover hidden endpoint vulnerabilities by reviewing specifications to identify undocumented routes, assess input validation gaps, and guide targeted fuzzing attacks against REST and GraphQL services.
uphiagoEnumerate hidden database tables, fields, and API endpoints from structured error messages.
NickCrewIdentify and mitigate security vulnerabilities in CI/CD pipelines.
jcastillotxIntercept and analyze HTTP traffic with Burp Suite proxy tools.
gajjalaashok75-UITest REST and GraphQL APIs for authentication, authorization, and validation weaknesses.
