Agent skills for Microsoft Copilot

Find and prove Broken Object Level Authorization (BOLA / API1:2023) in a REST or GraphQL API during an authorized assessment.

Harden sensitive business flows against Unrestricted Access (API6:2023) and detect automated abuse.

Analyze API changes for backward compatibility with breaking change detection and consumer impact assessment

Detect excessive data exposure (API3:2023) in an API from response telemetry and schema-diff analysis — endpoints returning sensitive…

Fetch economic data from FRED, World Bank, and other APIs

API de Categorias da Tray. Utilize quando o desenvolvedor precisar gerenciar a árvore de categorias da loja, incluindo consulta…

API de Pedidos da Tray. Utilize quando o desenvolvedor precisar gerenciar o ciclo completo de pedidos: listagem com filtros, consulta de…

API de Status de Pedido da Tray (recurso `/orders/statuses`).

Guide API design following REST, GraphQL, and gRPC best practices.

This skill should be used when reviewing API designs, auditing REST or gRPC endpoints, designing backend APIs, evaluating BFF…

Enforces best practices for REST API response structures and downstream data integrity to prevent silent failures and design ambiguities.

Enforces best practices for REST API response structures and ensures data integrity for downstream exports like Excel and PDF files.

Modern API development patterns for building high-performance, scalable web services.

Provides comprehensive guidance for generating API documentation by scanning code interfaces, extracting request/response information, and…

Procedures for creating comprehensive API documentation. === PROCEDURE: Endpoint Documentation === Authorization: Bearer your-api-key json…

Generate OpenAPI/Swagger documentation from code analysis

API documentation workflow for generating OpenAPI specs, creating developer guides, and maintaining comprehensive API documentation.

Detect Broken Function Level Authorization abuse (BFLA / API5:2023) against an API from access logs and role/route telemetry…

Configure perform API fuzzing to discover edge cases, crashes, and security

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.

API gateway for calling third-party APIs with managed OAuth connections, provided by Maton (https://maton.ai).