cyber-testing-api-for-mass-assignment-vulnerability

name	cyber-testing-api-for-mass-assignment-vulnerability
description	Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have access to by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the data model without filtering. Part of OWASP API3:2
hide	true

YURI skill adapter

Authoritative source: .claude/skills/cyber-testing-api-for-mass-assignment-vulnerability/SKILL.md

Authoritative source SHA-256: d83b602b3fe7c4e2db563271b5656ddf63f0456e32a404da50e1969be4155f5c

Source class: cyber-armed

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run node _SYSTEM/Scripts/skill-recall.mjs --show cyber-testing-api-for-mass-assignment-vulnerability and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.