Agent skills for Claude Code

REST API design patterns including resource naming, status codes, pagination, filtering, error responses, versioning, and rate limiting…

Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight developers and stand the…

Procedures for creating comprehensive API documentation. === PROCEDURE: Endpoint Documentation === Authorization: Bearer your-api-key json…

Apply this skill when adding an endpoint to apps/api/, authoring a mutation-ack serializer, wiring ManagerFactory, resolving Phase 5A…

Configure perform API fuzzing to discover edge cases, crashes, and security

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.

Configure API gateways for SDK traffic management

Discover Improper Inventory Management (API9:2023) during an authorized assessment — shadow, zombie, and deprecated API versions…

Discover and document existing API endpoints from code, logs, and traffic analysis

Automate API Labz tasks via Rube MCP (Composio).

Harden an API against mass assignment / Broken Object Property Level Authorization (API3:2023) by binding only allowlisted…

Automate API Ninjas tasks via Rube MCP (Composio).

Harden an API against Unrestricted Resource Consumption (API4:2023) with layered limits — gateway rate limiting, pagination and…

Generates client SDK code, API wrapper libraries, request/response models, and language-specific usage patterns for any REST API.

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against…

Harden a REST or GraphQL API against Security Misconfiguration (API8:2023).

Discover and characterize API Security Misconfiguration (API8:2023) during an authorized assessment — permissive CORS, verbose…

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and…

Prove Unrestricted Access to Sensitive Business Flows (API6:2023) during an authorized assessment — automating a business-critical flow…

Find and prove Server-Side Request Forgery (SSRF / API7:2023) in a REST or GraphQL API during an authorized assessment.

Automate API Sports tasks via Rube MCP (Composio).