transilience-api-security

Test GraphQL, REST, WebSocket, and LLM-integrated APIs for security vulnerabilities.

Updated Jun 21, 2026
One-click install
npx skills add https://github.com/infantesromeroadrian/arca-agent --skill transilience-api-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: transilience-api-security
Source: https://github.com/infantesromeroadrian/arca-agent/tree/main/template/skills/transilience-api-security
Command: npx skills add https://github.com/infantesromeroadrian/arca-agent --skill transilience-api-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a robust framework for API security testing, helping you identify and mitigate vulnerabilities in your GraphQL, REST, WebSocket, and LLM-integrated APIs.

Core Features & Use Cases

  • API Endpoint Discovery: Automatically discovers and documents API endpoints, including REST and GraphQL paths.
  • Security Testing: Applies a variety of security testing techniques to identify common vulnerabilities like SQL injection, cross-site scripting, and unauthorized access.
  • LLM Integration Security: Specifically tests for vulnerabilities in APIs that integrate with language models, including prompt injection and data exfiltration.
  • Use Case: Imagine you have a REST API that handles financial transactions. Use this Skill to test for SQL injection, XSS, and other security vulnerabilities, ensuring the integrity of your transaction processing.

Quick Start

Use the transilience-api-security skill to test the security of your API endpoints by running the 'discover' command followed by the specific endpoint path.

Frequently Asked Questions about transilience-api-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test my REST API for SQL injection and XSS vulnerabilities?

This Skill tests REST API security vulnerabilities like SQL injection and XSS by applying automated tests to your endpoints. You need to provide the API endpoint paths and relevant testing tools to identify these security issues.

What is LLM prompt injection and how can I test for it in my APIs?

LLM integration security involves testing for vulnerabilities like prompt injection and data exfiltration in language model APIs. This Skill applies targeted automated tests to your LLM-integrated API endpoints to identify these specific security issues.

Can I run security tests on both GraphQL and WebSocket endpoints?

Yes, you can test security on both GraphQL and WebSocket endpoints. The Skill provides a comprehensive testing framework that automatically discovers and documents these paths before applying automated security vulnerability tests.

How do I discover and document API endpoints before security testing?

You can discover and document API endpoints by running the 'discover' command followed by the specific endpoint path. This automatically maps your REST and GraphQL paths before applying security testing techniques.

Does this API security testing framework support rate limiting checks?

Yes, this API security testing framework supports rate limiting checks. It applies automated tests to identify rate limiting issues alongside other security vulnerabilities like SQL injection, XSS, and CSRF in your APIs.

What tools do I need to test API security vulnerabilities?

To test API security vulnerabilities, you need access to the API endpoints and relevant testing tools. The Skill serves as a framework that applies automated tests for SQL injection, XSS, and CSRF using your provided testing environment.