API安全测试的专业技能和方法论
Best for the OWASP-API-Top-10 workflow — auth bypass, broken object-level authorization, mass assignment, injection paths through API surfaces. Methodology-driven, not just a scanner. Strongest before a major API release or annual security review. Skip it for infrastructure security (TLS, secret rotation); that's a different toolchain.
OWASP API Top 10 路径走查最合适——鉴权绕过、对象级授权失效、批量赋值、API 注入面。围绕方法论而不是单纯扫描器。大版本 API 发布前或年度安全评审最有用。基础设施安全（TLS、密钥轮转）别用它，那是另一套工具链。
Use npx skills add to install this skill into the selected agent. Phase 0 commands are generated from source rules, not verified.
npx skills add https://github.com/Ed1s0nZ/CyberStrikeAI/tree/main/skills/api-security-testing -g -a codex -yDrop `-g` to install project-locally
A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via
WooYun business logic vulnerability methodology — 22,132 real cases across 6 domains (authentication bypass, authorizati
Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry. Covers…
| this skill · 当前api-security-testing | aig-scanner | wooyun-legacy | threat detection | |
|---|---|---|---|---|
| Rating · 评分 | — | — | — | — |
| Stars · 星标 | 3.7k | 3.6k | 1.6k | 14k |
| Risk · 风险 | Medium risk · 中风险 | Medium risk · 中风险 | Low risk · 低风险 | Medium risk · 中风险 |
| Best for · 最适合 | High-star GitHub skill discovery candidate. | A.I.G Scanner — AI security scanning for infrastructure, AI tools / skills, AI Agents, and LLM jailbreak evaluation via | WooYun business logic vulnerability methodology — 22,132 real cases across 6 domains (authentication bypass, authorizati | Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry. Covers… |
| Not for · 不适合 | Sensitive or production workflows without local review. | Workflows that require stronger human review than this catalog entry documents. | Workflows that require stronger human review than this catalog entry documents. | Workflows that require stronger human review than this catalog entry documents. |