api-testing

name	API Testing
description	Comprehensive API testing for REST and GraphQL endpoints with contract validation
allowed-tools	["Bash","Read","Write","Edit","Glob","Grep"]
graph	{"domains":["domain:software-engineering"],"specializations":["specialization:qa-testing-automation"],"skillAreas":["skill-area:api-contract-testing","skill-area:integration-testing"],"roles":["role:qa-engineer","role:backend-engineer"],"workflows":["workflow:feature-development"],"topics":["topic:test-driven-development"]}

API Testing Skill

Overview

This skill provides expert-level capabilities for API testing, covering REST, GraphQL, authentication flows, schema validation, and contract testing integration.

Capabilities

REST API Testing

• Execute API tests with Supertest/REST Assured
• HTTP method testing (GET, POST, PUT, PATCH, DELETE)
• Header and cookie manipulation
• File upload/download testing

GraphQL Testing

• Query and mutation testing
• Subscription testing
• Schema introspection validation
• Variable and fragment handling

Schema Validation

• Validate OpenAPI/Swagger schemas
• Response schema validation with Ajv/Joi
• Generate test cases from API specifications
• Contract validation

Authentication Testing

• OAuth 2.0 flow testing
• JWT token validation
• API key authentication
• Session-based authentication

Performance Assertions

• Response time validation
• Throughput measurements
• Rate limiting verification

Contract Testing

• Consumer contract generation
• Provider verification
• Pact integration

Target Processes

• api-testing.js - API test implementation
• contract-testing.js - Contract testing workflows
• security-testing.js - API security testing
• performance-testing.js - API performance validation

Dependencies

• supertest - HTTP assertions (Node.js)
• axios - HTTP client
• ajv - JSON schema validation
• graphql-request - GraphQL client

Usage Example

{
  kind: 'skill',
  skill: {
    name: 'api-testing',
    context: {
      action: 'execute-tests',
      baseUrl: 'https://api.example.com',
      specPath: 'openapi.yaml',
      authType: 'bearer',
      validateSchema: true
    }
  }
}

Configuration

The skill can auto-discover API specifications from OpenAPI/Swagger files and generate comprehensive test suites.