Home / Skills / api-authorization-and-bola
api-authorization-and-bola
yaklang/hack-skillsSkill
API authorization and BOLA testing playbook. Use when APIs expose object identifiers, nested resources, hidden writable fields, or weak function-level authorization.
Why this score
This repo hosts 10 skills, so its 2,509 stars are split between them (about 251 each) for scoring.
Popularity score: 69/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 21, 2026 at commit 6fbf0bc8d5c7, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneapi-authorization-and-bola yaklang/hack-skills · Skill | 69 | ★ 2.5k | ≈48 always | 2mo ago |
| authorization-bypass-detection Tencent/AI-Infra-Guard · Skill Both about authorization and function | 78 | ★ 6.9k | ≈41 always | 16d ago |