h3nr1-d14z

API Pentest — Security skill for Claude Code

Security community

Perform API security testing on: $ARGUMENTS.

How to install API Pentest

Installs to ~/.claude/commands/h3nr1-d14z-ai-redteam-toolkit-api-pentest.md

Terminal

mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/h3nr1-d14z/ai-redteam-toolkit/HEAD/.claude/commands/api-pentest.md -o ~/.claude/commands/h3nr1-d14z-ai-redteam-toolkit-api-pentest.md

Restart Claude Code, or start a new session, for it to be picked up.

What API Pentest does

Perform API security testing on: $ARGUMENTS

Identify API type (REST/GraphQL/gRPC/WebSocket). Map all endpoints from docs, traffic, JS analysis. Test: authentication (JWT with tools/web/jwt-toolkit.py, OAuth, API keys), authorization (IDOR, BOLA, BFLA), injection (SQLi, NoSQL, command), rate limiting, mass assignment, excessive data exposure. For GraphQL: test introspection, nested queries, batch attacks. For WebSocket: test origin validation, message injection. Reference: methodology/api-pentes

Alternatives in Security

Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
Security Advanced Pack — Advanced security testing and analysis 1.6k ★