API Security

zhaoxuya520

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication, authorization, rate-limit, and CI/CD testing.

Install

The individual skill folder is not confirmed. This command opens the repository’s skill selector; follow the upstream instructions.

skills CLI

npx skills add zhaoxuya520/reverse-skill

API Securityhardw00tComprehensive API security testing skill for REST, GraphQL, gRPC, and WebSocket APIs. This skill should be used when performing API penetration testing, testing for OWASP API Top 10 vulnerabilities, fuzzing API endpoints, testing authentication/authorization, and analyzing API specifications.Security105 Repository stars
Trail of Bits SkillsTrail of BitsCollectionTrail of Bits plugin marketplace of skills for security research, vulnerability detection and audit workflows; Codex can load it through Claude marketplace compatibility.Security95 skills7.7k Repository stars
Author ContributionsMicrosoftOfficialIdentify all files a specific author contributed to on a branch vs its upstream, tracing code through renames. Use when asked who edited what, what code an author contributed, or to audit authorship before a merge. This skill should be run as a subagent — it performs many git operations and returns a concise table.Security194.2k Repository stars
Memory Leak AuditMicrosoftOfficialAudit code for memory leaks and disposable issues. Use when reviewing event listeners, DOM handlers, lifecycle callbacks, or fixing leak reports. Covers addDisposableListener, Event.once, MutableDisposable, DisposableStore, and onWillDispose patterns.Security194.2k Repository stars
Next Bundle OptimizerVercelOfficialAudit and reduce Next.js browser initial-load work. Use for slow route startup, oversized client bundles, duplicate browser dependencies, or features that can wait for interaction.Security143.1k Repository stars
Next Partial Prefetching AdoptionVercelOfficialTurn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the `partialPrefetching` flag, opt routes in with `export const prefetch = 'partial'`, audit `Link prefetch={true}` behavior, preserve existing prefetched UI with `instant()` tests, or resolve the instant-link-prefetch-partial and…Security143.1k Repository stars

Install

Related