Skip to main content
affpapa.org
RU EN
skill

api-fuzzing-bug-bounty — Claude Code skill for API security

This skill guides security checks for REST, SOAP, and GraphQL APIs. Use it to structure authorized bug bounty work or an API security assessment.

Install into Claude Code · claude-code-templates All methods and platforms ↓ 
npx claude-code-templates@latest --skill security/api-fuzzing-bug-bounty
Open on GitHub

What api-fuzzing-bug-bounty does

The skill lays out an API assessment, starting with documentation and endpoint discovery, then moving through authentication, access control, and HTTP method checks. It covers IDOR, authentication bypasses, injection flaws, and rate limits. GraphQL has its own schema and query testing guidance.

You’ll need Burp Suite or a comparable proxy, wordlists, Python for scripts, and familiarity with REST, GraphQL, or SOAP. That setup matters: some of the described tests depend on those tools and protocol knowledge. Run checks only against APIs you’re authorized to assess.

What it helps with

  • discover API endpoints from available documentation
  • check whether one user can access another user’s data
  • test authentication and rate-limit controls
  • probe REST and GraphQL requests for injection flaws
  • compare responses across HTTP methods

Example prompts for the agent

  • Assess this REST API: find endpoints and test whether access controls are enforced.
  • Check this GraphQL API for authorization flaws and injection points.
  • Draft an API bug bounty test plan covering IDOR and rate limits.

How to install api-fuzzing-bug-bounty

1claude-code-templates

npx claude-code-templates@latest --skill security/api-fuzzing-bug-bounty

2Skills CLI (Vercel)

npx skills add davila7/claude-code-templates --skill api-fuzzing-bug-bounty -a claude-code

3Manually: put the files in place

~/.claude/skills/api-fuzzing-bug-bounty/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/api-fuzzing-bug-bounty/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about api-fuzzing-bug-bounty

How do I install api-fuzzing-bug-bounty in Claude Code?

Run npx claude-code-templates@latest --skill security/api-fuzzing-bug-bounty.

What does api-fuzzing-bug-bounty do?

It guides checks for REST, SOAP, and GraphQL APIs, including endpoint discovery, authentication, object access, injection, and HTTP methods.

What do I need to use api-fuzzing-bug-bounty?

You need Burp Suite or a similar proxy, wordlists, Python for scripting, and familiarity with REST, GraphQL, or SOAP.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set495

The whole set →
timeline-compressor Compresses a real-world timeline into fast simulation cycles so you can test decisions and risks sooner. Useful before you commit to a plan. 146installs scikit-learn A Claude skill that steers the agent through scikit-learn work: classification, clustering, preprocessing, pipelines and hyperparameter tuning. 143installs crewai Designs multi-agent teams on CrewAI: roles, tasks, orchestration and process types. Useful once a single agent stops being enough. 141installs perplexity This skill wires Perplexity into Claude: web search, conversational answers, and deep research through an agent. Handy when you need current information rather than library docs. 140installs dependency-updater A skill that detects your project type, applies safe dependency updates on its own and asks before touching major versions. 136installs data-processing-ray-data A Claude skill that tells the agent how to process large datasets with Ray Data: streaming, GPU transforms, batch inference. 134installs svelte-debug Reads a Svelte or SvelteKit error and stack trace, finds whether the cause is compilation, runtime or config, and hands you a fix. 134installs publisher-medium Turns a blog post from markdown, PDF or a URL into HTML you can paste into Medium, with markers showing where images go. 134installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor