Tests API authentication mechanisms for weaknesses including broken token validation, missing authentication on endpoints, weak password policies, credential stuffing susceptibility, token leakage in URLs or logs, and session management flaws. The tester evaluates JWT implementation, API key handling, OAuth flows, and session token entropy to identify authentication bypasses.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-api-authentication-weaknessesnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-api-authentication-weaknesses -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill testing-api-authentication-weaknesses -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/testing-api-authentication-weaknessesgh skill install mukul975/Anthropic-Cybersecurity-Skills testing-api-authentication-weaknessesgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/testing-api-authentication-weaknesses ~/.claude/skills/testing-api-authentication-weaknesses # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/testing-api-authentication-weaknesses ~/.agents/skills/testing-api-authentication-weaknesses # Codex, Cursor, Gemini CLI, Copilot, OpenCode