Tests APIs for mass assignment (auto-binding), OWASP API3:2023, by identifying writable endpoints, adding undocumented fields to request bodies (role, isAdmin, price, balance), and checking whether the server binds them to the data model without filtering. Use when testing an API for mass assignment, parameter binding abuse, or over-posting on profile, registration, or object-creation endpoints.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-api-for-mass-assignment-vulnerabilitynpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-api-for-mass-assignment-vulnerability -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-api-for-mass-assignment-vulnerability -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/testing-api-for-mass-assignment-vulnerabilitygh skill install mukul975/Anthropic-Cybersecurity-Skills testing-api-for-mass-assignment-vulnerabilitygit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/testing-api-for-mass-assignment-vulnerability ~/.claude/skills/testing-api-for-mass-assignment-vulnerability # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/testing-api-for-mass-assignment-vulnerability ~/.agents/skills/testing-api-for-mass-assignment-vulnerability # Codex, Cursor, Gemini CLI, Copilot, OpenCode