pentest-api

API发现与未授权测试入口 - 主动探测各类API端点，对发现的API进行未授权访问测试

Jump to install Review files

Repository: OpenAisec/Miko
Last source activity: July 8, 2026 at 13:37
Detected SKILL.md language: Chinese
Stars: 935
Forks: 53

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with an AI assistant

Copy this prompt into the AI assistant you're using.

Follow https://skillsmp.com/skill-install/prompt.md to install only the Agent Skill at https://github.com/OpenAisec/Miko/tree/main/data/skills/pentest-api.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/OpenAisec/Miko --skill pentest-api

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

4 files

SKILL.md

Source instructions · Read-only preview

name	pentest-api
description	API发现与未授权测试入口 - 主动探测各类API端点，对发现的API进行未授权访问测试

Back to search Back to installation

secskills

渗透测试实战技能 v1.2.0。覆盖信息收集、漏洞发现 (3梯队9+3+6类)、漏洞利用、后渗透、免杀全流程。当用户给出具体目标 (IP/域名/URL) 且意图是攻击/利用/拿权限时触发。不触发: 概念讨论、蓝队防御、代码审计、CVE文档查询。

2026-08-06

web-access

所有联网操作必须通过此 skill 处理，包括：搜索、网页抓取、登录后操作、网络交互等。触发场景：用户要求搜索信息、查看网页内容、访问需要登录的网站、操作网页界面、抓取社交媒体内容（小红书、微博、推特等）、读取动态渲染页面、以及任何需要真实浏览器环境的网络任务。

2026-07-23

browser-use

Direct browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work.

2026-07-23

View all from this repository

pentest-api

Source facts

Install options

Install with an AI assistant

Review the source files

More from this repository

Install with an AI assistant

More from this repository