API Security skill: what it does and how to install it
Routes API security testing to focused workflows for endpoint discovery, authorisation, token abuse, GraphQL and hidden parameters.
Summary generated from the skill's documentation.
Install
$ npx skills add yaklang/hack-skills --skill api-secRun it in a terminal. If your agent is already running, start a new session so it picks the skill up.
About this skill
What it does. Triage API observations such as exposed OpenAPI docs, identifiers, JWTs and GraphQL endpoints, then route testing to a focused topic. It recommends an order covering endpoint discovery, authorisation, token and rate-limit boundaries, and hidden fields.
When to use it. For planning security tests on REST APIs, mobile backends or GraphQL endpoints before investigating a specific issue.
History
Repo stars
2.5k+177 since 5 Oct 2026
Stars are counted for the whole repository, which holds 15 skills.
Show as a table
| Date | Repo stars |
|---|---|
| 26 Oct 2026 | 2,549 |
| 25 Oct 2026 | 2,538 |
| 24 Oct 2026 | 2,533 |
| 23 Oct 2026 | 2,528 |
| 22 Oct 2026 | 2,523 |
| 21 Oct 2026 | 2,521 |
| 20 Oct 2026 | 2,513 |
| 19 Oct 2026 | 2,508 |
| 18 Oct 2026 | 2,492 |
| 17 Oct 2026 | 2,466 |
| 16 Oct 2026 | 2,458 |
| 15 Oct 2026 | 2,455 |
| 14 Oct 2026 | 2,450 |
| 13 Oct 2026 | 2,443 |
| 12 Oct 2026 | 2,437 |
| 11 Oct 2026 | 2,426 |
| 10 Oct 2026 | 2,418 |
| 9 Oct 2026 | 2,412 |
| 8 Oct 2026 | 2,401 |
| 7 Oct 2026 | 2,382 |
| 6 Oct 2026 | 2,375 |
| 5 Oct 2026 | 2,372 |
Installs
3.9k+118 since 19 Oct 2026
Installs via skills.sh
Show as a table
| Date | Installs |
|---|---|
| 26 Oct 2026 | 3,925 |
| 25 Oct 2026 | 3,909 |
| 24 Oct 2026 | 3,895 |
| 23 Oct 2026 | 3,879 |
| 22 Oct 2026 | 3,862 |
| 21 Oct 2026 | 3,843 |
| 20 Oct 2026 | 3,827 |
| 19 Oct 2026 | 3,807 |
Similar skills
- Writing SkillsGuides creating, editing and testing skills before they are deployed.
- Claude APIReference for the Claude API and Anthropic SDKs: model ids, pricing, parameters, streaming, tool use, MCP, caching and model migration.
- Webapp TestingTests local web applications with Playwright: verify frontend behaviour, debug the UI, capture screenshots and read browser logs.