Home / Skills / api-audit

api-audit

briiirussell/cybersecurity-skillsSkill

Audit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023). Use when the user mentions 'API security,' 'API audit,' 'BOLA,' 'broken object level authorization,' 'BFLA,' 'function-level authorization,' 'mass assignment,' 'API rate limiting,' 'GraphQL security,' 'REST security,' 'API authentication,' 'API authorization,' 'excessive data exposure,' or needs to review API endpoints for security weaknesses.

ScannedSkillSource: GitHub
426 stars +6 this week Updated 5mo ago License MIT Context ≈109 tokens always loaded
55popular

Why this score

Stars11/35
Usage (forks)4/15
Upkeep15/25
License15/15
Owner history10/10

This repo hosts 10 skills, so its 426 stars are split between them (about 43 each) for scoring.

Popularity score: 55/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

Security

Scanned Oct 21, 2026 at commit c9ade0349f8e, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Nothing from another maker does quite the same job yet.