Home / Skills / offensive-api-abuse
offensive-api-abuse
Advanced API exploitation methodology focused on business logic abuse and sophisticated attack patterns that bypass traditional security controls. Covers business logic bypass through API call chaining and workflow manipulation. Addresses GraphQL-specific attacks including batching for credential brute-force, query depth exploitation, and introspection abuse. Includes pagination exploitation for data exfiltration, webhook hijacking for SSRF and data interception, and resource exhaustion through algorithmic complexity attacks. Covers race conditions in API transactions using parallel request te
Why this score
This repo hosts 10 skills, so its 7,620 stars are split between them (about 762 each) for scoring.
Popularity score: 79/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit a8de813edc9f, with Cisco's open-source skill-scanner.
What its code does:
- Makes network requestsSKILL.md:121
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneoffensive-api-abuse SnailSploit/Claude-Red · Skill | 79 | ★ 7.6k | ≈155 always | 23d ago |
| api-auth-and-jwt-abuse yaklang/hack-skills · Skill Both about abuse | 69 | ★ 2.5k | ≈46 always | 2mo ago |
| competition-ad-certificate-abuse zhaoxuya520/reverse-skill · Skill Both about abuse and control | 82 | ★ 43k | ≈139 always | 1mo ago |
| acl-abuse ADScanPro/Claude-AD · Skill Both about abuse and force | 58 | ★ 212 | ≈138 always | 2mo ago |
| analyzing-active-directory-acl-abuse mukul975/Anthropic-Cybersecurity-Skills · Skill Both about abuse | 81 | ★ 35k | ≈27 always | 2mo ago |