api-security-testing

"Implement — "

跳到安装

仓库: thiagofernandes1987-create/APEX
最近来源活动: 2026年4月18日 09:35
检测到的 SKILL.md 语言: 英语
星标: 2
分支: 0

安装方式

默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

直接命令不会经过审查 Prompt；运行前请先检查来源。

npx skills add https://github.com/thiagofernandes1987-create/APEX --skill api-security-testing

命令会保持在同一行。复制前请横向滚动并检查完整内容。

想先保存到本地？可下载 SkillsMP 当前能够提供的文件。

检查来源文件

决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。

SKILL.md

来源说明 · 只读预览

name	api-security-testing
description	"Implement — "

API Security Testing Workflow

Overview

Specialized workflow for testing REST and GraphQL API security including authentication, authorization, rate limiting, input validation, and API-specific vulnerabilities.

When to Use This Workflow

Use this workflow when:

Testing REST API security
Assessing GraphQL endpoints
Validating API authentication
Testing API rate limiting
Bug bounty API testing

Workflow Phases

Phase 1: API Discovery

Skills to Invoke

api-fuzzing-bug-bounty - API fuzzing
scanning-tools - API scanning

Actions

Enumerate endpoints
Document API methods
Identify parameters
Map data flows
Review documentation

Copy-Paste Prompts

Use @api-fuzzing-bug-bounty to discover API endpoints

Phase 2: Authentication Testing

Skills to Invoke

broken-authentication - Auth testing
api-security-best-practices - API auth

Actions

Test API key validation
Test JWT tokens
Test OAuth2 flows
Test token expiration
Test refresh tokens

Copy-Paste Prompts

Use @broken-authentication to test API authentication

Phase 3: Authorization Testing

Skills to Invoke

idor-testing - IDOR testing

Actions

Test object-level authorization
Test function-level authorization
Test role-based access
Test privilege escalation
Test multi-tenant isolation

Copy-Paste Prompts

Use @idor-testing to test API authorization

Phase 4: Input Validation

Skills to Invoke

api-fuzzing-bug-bounty - API fuzzing
sql-injection-testing - Injection testing

Actions

Test parameter validation
Test SQL injection
Test NoSQL injection
Test command injection
Test XXE injection

Copy-Paste Prompts

Use @api-fuzzing-bug-bounty to fuzz API parameters

Phase 5: Rate Limiting

Skills to Invoke

api-security-best-practices - Rate limiting

Actions

Test rate limit headers
Test brute force protection
Test resource exhaustion
Test bypass techniques
Document limitations

Copy-Paste Prompts

Use @api-security-best-practices to test rate limiting

Phase 6: GraphQL Testing

Skills to Invoke

api-fuzzing-bug-bounty - GraphQL fuzzing

Actions

Test introspection
Test query depth
Test query complexity
Test batch queries
Test field suggestions

Copy-Paste Prompts

Use @api-fuzzing-bug-bounty to test GraphQL security

Phase 7: Error Handling

Skills to Invoke

api-security-best-practices - Error handling

Actions

Test error messages
Check information disclosure
Test stack traces
Verify logging
Document findings

Copy-Paste Prompts

Use @api-security-best-practices to audit API error handling

API Security Checklist

Quality Gates

All endpoints tested
Vulnerabilities documented
Remediation provided
Report generated

Related Workflow Bundles

security-audit - Security auditing
web-security-testing - Web security
api-development - API development

Diff History

v00.33.0: Ingested from antigravity-awesome-skills community repo

Why This Skill Exists

Implement —

What If Fails

condition: Código não disponível para análise

返回搜索返回安装

apex-method

Token-aware reasoning workflow with real tools: picks an operating mode to control cost, runs a structured pipeline (decompose → validate → verify → snapshot), and gives Claude Program-of-Thought, RK4/Euler, a code gate, and a safe skill router. Use when: multi-step or high-stakes tasks, real math, precise computation, audits, or the user mentions APEX, PoT, pipeline, or scientific mode.

2026-07-21

agent-framework-azure-ai-py

**v00.33.0**: Ingested from antigravity-awesome-skills community repo

2026-07-21

agent-manager-skill

run multiple local CLI agents in parallel (separate tmux sessions)

2026-07-21

查看这个仓库的全部 Skills

api-security-testing

来源信息

安装方式

检查来源文件

API Security Testing Workflow

Overview

When to Use This Workflow

Workflow Phases

Phase 1: API Discovery

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 2: Authentication Testing

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 3: Authorization Testing

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 4: Input Validation

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 5: Rate Limiting

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 6: GraphQL Testing

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 7: Error Handling

Skills to Invoke

Actions

Copy-Paste Prompts

API Security Checklist

Quality Gates

Related Workflow Bundles

Diff History

Why This Skill Exists

What If Fails

同仓库更多 Skills

API Security Testing Workflow

Overview

When to Use This Workflow

Workflow Phases

Phase 1: API Discovery

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 2: Authentication Testing

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 3: Authorization Testing

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 4: Input Validation

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 5: Rate Limiting

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 6: GraphQL Testing

Skills to Invoke

Actions

Copy-Paste Prompts

Phase 7: Error Handling

Skills to Invoke

Actions

Copy-Paste Prompts

API Security Checklist

Quality Gates

Related Workflow Bundles

Diff History

Why This Skill Exists