BaaRai a11c2ed10c feat(skills): port api-security playbook from reverse-skill (MIT) ...

Ten-phase authorized API hunting methodology (BOLA/IDOR/BFLA, JWT and
OAuth, GraphQL abuse, input validation, logic, rate-limit trust
confusion, data exposure) as the hunting counterpart of api-recon.

Adapted from zhaoxuya520/reverse-skill skills/api-security (MIT).
Refs #76

2026-10-12 13:15:05 +02:00

..

SKILL.md

feat(skills): port api-security playbook from reverse-skill (MIT)

2026-10-12 13:15:05 +02:00