Tests APIs for excessive data exposure (OWASP API3:2023) by intercepting raw API responses and comparing them against what the UI actually renders, looking for leaked PII, internal identifiers, debug data, or business-sensitive fields the frontend filters but the API still transmits.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-excessive-data-exposure-in-apinpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-excessive-data-exposure-in-api -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-excessive-data-exposure-in-api -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/exploiting-excessive-data-exposure-in-apigh skill install mukul975/Anthropic-Cybersecurity-Skills exploiting-excessive-data-exposure-in-apigit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-excessive-data-exposure-in-api ~/.claude/skills/exploiting-excessive-data-exposure-in-api # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-excessive-data-exposure-in-api ~/.agents/skills/exploiting-excessive-data-exposure-in-api # Codex, Cursor, Gemini CLI, Copilot, OpenCode