Über diesen Skill
Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoints from an OpenAPI/GraphQL schema (or by crawling), then actually exploit the API-specific vulnerability classes in the OWASP API Security Top 10 (2023) — broken object-level authorization (BOLA/IDOR), broken object property level authorization (excessive data exposure and mass assignment), broken function-level…
Warum wir es empfehlen
A task from Strix Security Testing Skills. Retain the upstream supporting files and follow the repository’s setup instructions.
Vor der Nutzung
- Strix CLI with its Docker/LLM configuration, or a managed Strix account. Scans require an authorized target and relevant test credentials.
Unterstützte Agents
Claude CodeCodex CLICursorGitHub Copilot
Quellen und Referenzen
Die Originalquellen sind unten verlinkt. Praktische Einstiegsideen sind redaktionelle Vorschläge von SkillHey.
