hackingyseguridad/ia · .claude/skills/api/SKILL.md
api-pentest skillC
Usar esta habilidad SIEMPRE que el usuario quiera realizar pruebas de penetración, auditoría, análisis o explotación de vulnerabilidades sobre una API REST, API GraphQL, API SOAP, portal web con API, servicio HTTP/HTTPS con endpoints de API, IP o FQDN con servicios de API activos. Activar cuando se mencionen: auditoría de API, OWASP API Top 10, autenticación API, JWT, OAuth2, API Key, token de acceso, endpoints API, Swagger, OpenAPI, GraphQL, REST, SOAP, inyección en API, BOLA, BFLA, SSRF en API
Latest version
mdr add hackingyseguridad/ia/api-pentest@git:20260619.04045d9Exact content
mdr add hackingyseguridad/ia/api-pentest@sha256:971b18141a9250fcBadge
[](https://markdownregistry.com/a/art_r3dq7w2f272556e6)
0 badge views in 30 days
Versions
Audit of the latest version
C 15 of 17 checks passed. Deterministic, no model, same answer every run.
- fail: No link to a raw IP address (matched: http://169.254.169.254)
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (21568 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
Source
GitHub
hackingyseguridad/ia · 2 stars · license NOASSERTION · pushed 2026-09-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_r3dq7w2f272556e6 GET https://markdownregistry.com/api/v1/resolve?ref=hackingyseguridad/ia/api-pentest GET https://markdownregistry.com/api/v1/blob/971b18141a9250fc6933d9fbf8590893cc4dbe5d3225f105bb90409911877ddb