test-driven-development
OBobra/superpowers298k近 7 天新增 2,631 个 star
api-recon-and-docs
API reconnaissance and documentation review playbook. Use when discovering endpoints, schemas, versions, OpenAPI specs, hidden docs, and surface area for API testing.
- Star
- 2,440
- 分类
- 浏览器与测试
- 许可证
- MIT
- 最近提交
- 2026年9月13日
skills/api-recon-and-docs/SKILL.md
在 GitHub 上查看SKILL: API Recon and Docs — Endpoints, Schemas, and Version Surface
AI LOAD INSTRUCTION: Use this skill first when the target is a REST, mobile, or GraphQL API and you need to enumerate endpoints, documentation, versions, and hidden surface area before exploitation.
1. PRIMARY GOALS
- Discover all reachable API entrypoints.
- Extract schemas, optional fields, and role differences.
- Identify old versions, mobile paths, GraphQL endpoints, and undocumented parameters.
2. RECON CHECKLIST
JavaScript and client mining
curl https://target/app.js | grep -oE '(/api|/rest|/graphql)[^"'\'' ]+' | sort -u
Common documentation and schema paths
/swagger.json
/openapi.json
/api-docs
/docs
/.well-known/
/graphql
/gql
Version and product drift
/api/v1/
/api/v2/
/api/mobile/v1/
/legacy/
3. WHAT TO EXTRACT FROM DOCS
- optional and undocumented fields
- admin-only request examples
- deprecated endpoints that may still be active
- schema hints like
additionalProperties: true - parameter names tied to filtering, sorting, IDs, roles, or tenancy
4. NEXT ROUTING
| Finding | Next Skill |
|---|---|
| object IDs everywhere | api authorization and bola |
| JWT, OAuth, role claims | api auth and jwt abuse |
| GraphQL or hidden fields | graphql and hidden parameters |
| strong auth boundary but suspicious business flow | business logic vulnerabilities |
相似的 Skill
migrate-to-shoehorn
MAmattpocock/skills288k近 7 天新增 10,178 个 star
agent-runtime-gateway-smoke-test
AFaffaan-m/ECC278k近 7 天新增 4,046 个 star
精选
ai-regression-testing
AFaffaan-m/ECC278k近 7 天新增 4,046 个 star
官方
firecrawl-build-interact
FIfirecrawl/firecrawl191k近 7 天新增 2,010 个 star