api-sec

Route each API security issue to the right test track.

API security

What it does

Routes API security issues to a deeper testing workflow based on the issue type.

When to use it

Use when a target exposes APIs or when the API testing order needs to be defined.

Give it an API issue or observation; it returns the appropriate deeper testing track.

What you provide

No additional actions listed in the analysis.

Routes reconnaissance, documentation, version drift, and hidden-documentation work to this skill.

Routes object and function authorization, method abuse, and hidden writable-field work to this skill.

Routes bearer-token, header-trust, claim-abuse, and rate-limit-bypass work to this skill.

Routes GraphQL introspection, batching, undocumented-field, and hidden-parameter work to this skill.