domains / families / security / api-security-testing

api-security-testing

authentic

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

When to use

• Testing REST API security
• Assessing GraphQL endpoints
• Validating API authentication
• Testing API rate limiting
• Bug bounty API testing

When not to use

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Skill page

Source