agency-api-tester

Validates API functionality, security, and performance through automated test suites and reporting.

Updated Jul 27, 2026
One-click install
npx skills add https://github.com/imMamdouhaboammar/Mimera --skill agency-api-tester-immamdouhaboammar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agency-api-tester
Source: https://github.com/imMamdouhaboammar/Mimera/tree/main/.agents/skills/testing-api-tester
Command: npx skills add https://github.com/imMamdouhaboammar/Mimera --skill agency-api-tester-immamdouhaboammar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? APIs often ship without thorough validation, leading to security vulnerabilities, SLA violations, and integration failures in production. This Skill provides a structured methodology for testing APIs across functional, security, and performance dimensions before release. ## Core Features & Use Cases - Functional & Contract Testing: Builds automated test suites covering endpoint behavior, error handling, and backward compatibility across API versions. - Security Validation: Tests authentication, authorization, input sanitization, rate limiting, and the OWASP API Security Top 10 vulnerabilities. - Performance Testing: Executes load, stress, and concurrency tests against SLA targets such as sub-200ms 95th percentile response times. - Use Case: Before releasing a new user management API, use this Skill to generate a Playwright-based test suite that validates endpoint responses, rejects SQL injection attempts, enforces rate limits, and measures response times under 50 concurrent requests, producing a go/no-go release report. ## Quick Start Ask the agent to create a comprehensive test suite for your REST API covering functional, security, and performance scenarios with a final quality report.

Frequently Asked Questions about agency-api-tester

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test a REST API for security vulnerabilities?▼

Test authentication by requesting endpoints without tokens and expecting 401 responses, probe inputs with SQL injection payloads, and verify rate limiting by sending burst requests. Cover the OWASP API Security Top 10 including broken authorization and injection flaws.

How to measure API response time under load?▼

Send concurrent requests with Promise.all and measure elapsed time using performance.now() to compute average and percentile latencies. Validate results against SLA targets such as sub-200ms for the 95th percentile under normal load.

What test coverage should an API have before release?▼

Aim for 95% or higher endpoint coverage spanning functional, security, and performance scenarios. Include error handling, edge cases, and failure responses, and integrate the suite into CI/CD so every deployment passes quality gates.

Can Playwright be used for API testing instead of UI testing?▼

Yes, Playwright's test runner supports API testing through fetch calls and request fixtures without launching a browser. It works well for endpoint validation, authentication flows, and assertions on response status codes and bodies.

Why do API tests pass locally but fail in CI pipelines?▼

Failures usually stem from missing environment variables like API_BASE_URL or test credentials, network isolation, or non-deterministic test data. Externalize configuration through environment variables and use synthetic test data for reproducibility.