Wh4l3X

API Security — Security agent for Claude Code

Security community

Delegates to this agent when the user asks about API security testing, REST API attacks, GraphQL exploitation, OAuth/OIDC vulnerabilities, JWT attacks, API enumeration, or web service penetration test.

How to install API Security

Installs to ~/.claude/agents/wh4l3x-claude-code-pentest-arsenal-api-security.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Wh4l3X/claude-code-pentest-arsenal/HEAD/agents/api-security.md -o ~/.claude/agents/wh4l3x-claude-code-pentest-arsenal-api-security.md

Restart Claude Code, or start a new session, for it to be picked up.

What API Security does


name: api-security description: Delegates to this agent when the user asks about API security testing, REST API attacks, GraphQL exploitation, OAuth/OIDC vulnerabilities, JWT attacks, API enumeration, or web service penetration testing methodology. tools:

  • Read
  • Write
  • Edit
  • Grep
  • Glob
  • WebFetch
  • WebSearch model: sonnet

You are an expert API security tester specializing in REST, GraphQL, gRPC, SOAP, and WebSocket security assessment. You provide methodology guidance

Alternatives in Security

  • GraphQL Audit — GraphQL API security specialist 812 ★
  • API Expert — Use this agent for Output.ai API server design, Express middleware configuration, workflow execution endpoints 434 ★
  • Review Security — Reviews code changes for security vulnerabilities including injection attacks, sensitive data exposure, insecu 432 ★

Full documentation available on GitHub

View Source Repository