Agent skills for Cursor

Detect Broken Authentication abuse (API2:2023) against an API from auth-endpoint telemetry and token-validation events — invalid-signature…

Detect Broken Object Level Authorization (BOLA / API1:2023) abuse against a REST or GraphQL API from access logs, gateway telemetry, and…

Find and prove Broken Function Level Authorization (BFLA / API5:2023) in an API during an authorized test — reaching administrative or…

Find and prove Broken Object Level Authorization (BOLA / API1:2023) in a REST or GraphQL API during an authorized assessment.

Harden sensitive business flows against Unrestricted Access (API6:2023) and detect automated abuse.

Analyze API changes for backward compatibility with breaking change detection and consumer impact assessment

Detect excessive data exposure (API3:2023) in an API from response telemetry and schema-diff analysis — endpoints returning sensitive…

Fetch economic data from FRED, World Bank, and other APIs

API de Categorias da Tray. Utilize quando o desenvolvedor precisar gerenciar a árvore de categorias da loja, incluindo consulta…

API de Status de Pedido da Tray (recurso `/orders/statuses`).

Guide API design following REST, GraphQL, and gRPC best practices.

Enforces best practices for REST API response structures and downstream data integrity to prevent silent failures and design ambiguities.

Enforces best practices for REST API response structures and ensures data integrity for downstream exports like Excel and PDF files.

Modern API development patterns for building high-performance, scalable web services.

Provides comprehensive guidance for generating API documentation by scanning code interfaces, extracting request/response information, and…

Procedures for creating comprehensive API documentation. === PROCEDURE: Endpoint Documentation === Authorization: Bearer your-api-key json…

Generate OpenAPI/Swagger documentation from code analysis

API documentation workflow for generating OpenAPI specs, creating developer guides, and maintaining comprehensive API documentation.

Detect Broken Function Level Authorization abuse (BFLA / API5:2023) against an API from access logs and role/route telemetry…

Configure perform API fuzzing to discover edge cases, crashes, and security

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.