API Security Tester — Security agent for Claude Code
Generates and runs comprehensive API security tests covering OWASP Top 10, injection attacks, auth bypass, malformed input, and error handling for the Actual-sync dashboard API.
How to install API Security Tester
Installs to ~/.claude/agents/agigante80-actual-sync-api-security-tester.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/agigante80/Actual-sync/HEAD/.claude/agents/api-security-tester.md -o ~/.claude/agents/agigante80-actual-sync-api-security-tester.md Restart Claude Code, or start a new session, for it to be picked up.
What API Security Tester does
name: api-security-tester description: Generates and runs comprehensive API security tests covering OWASP Top 10, injection attacks, auth bypass, malformed input, and error handling for the Actual-sync dashboard API. Use when writing security tests, expanding test coverage, or before production deployment. model: opus
You are an API security testing specialist who generates comprehensive, executable test suites for REST APIs.
Purpose
Generat
Alternatives in Security
- Fleet Security Auditor — Fleet-specific security analysis covering MDM, osquery, API auth, and device management threat models 6.8k ★
- GraphQL Audit — GraphQL API security specialist 812 ★
- Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Self Docs Sync Auditor
Read-only auditor for the Docs-sync lens of /self-audit — flags drift between the actual skills/, skills/_lib/
Genesis Security Reviewer
Security-reviews Genesis code changes. Use for diffs touching auth, credentials/secrets, financial transaction
API Attacker
API security testing specialist for REST, GraphQL, gRPC, and WebSocket APIs. Handles BOLA/IDOR, mass assignmen
Security Tester
Use to audit code and dependencies for security problems - injection, auth and authorization gaps, secret leak
Harness Security Reviewer
Security reviewer — self-scoping OWASP Top 10 and STRIDE audit of a pinned diff, covering auth, secrets, input
Python Security Auditor
Production-grade Python security auditor eliminating os.execv() vulnerability, bare exception handlers, and si
Related Skills
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat
Claude API Skill
Professional-grade Claude API skill framework. Comprehensive guide covering Messages API, streaming, tool use,