Assess REST, GraphQL, gRPC, WebSocket, and MCP APIs against OWASP API Top 10 2023.
npx skills add https://github.com/blamejs/exceptd-skills --skill api-security-blamejs
Please help me install this Agent Skill. Skill: api-security Source: https://github.com/blamejs/exceptd-skills/tree/main/skills/api-security Command: npx skills add https://github.com/blamejs/exceptd-skills --skill api-security-blamejs
Legacy security frameworks and tools are built for pre-AI, network-centric environments and fail to address modern API attack surfaces including AI-API abuse, MCP transport risks, and non-REST protocol-specific weaknesses like GraphQL query complexity attacks and gRPC reflection exposure. This skill fills that gap with guidance grounded in mid-2026 threat reality, not outdated framework documentation.
Use the api-security skill to conduct a full assessment of your organization's REST, GraphQL, and MCP API surfaces and generate a prioritized remediation roadmap for OWASP API Top 10 2023 and AI-API specific threats.
High-intent search queries and answers about installing and using this skill.
Assess API security risks for GraphQL, gRPC, and MCP by mapping OWASP API Top 10 2023, MITRE ATT&CK, and ATLAS TTPs to exploitable protocol-specific weaknesses, generating auditable risk scorecards and remediation roadmaps.
Identify BOLA vulnerabilities in AI chatbot APIs by evaluating authentication coverage matrices and applying threat assessments that map modern non-REST API attack surfaces to the OWASP API Top 10 2023 framework.
Find compliance gaps in NIST 800-53, ISO 27001, and PCI DSS by explicitly flagging where legacy frameworks fail to cover AI-API abuse, agentic attack patterns, and MCP transport misconfigurations.
Assess REST, WebSocket, and AI-API denial-of-wallet threats concurrently by inventorying API surfaces and generating a unified risk scorecard aligned to mid-2026 threat reality and modern compliance requirements.
Legacy security frameworks fail to protect modern API attack surfaces because they are built for pre-AI, network-centric environments and lack coverage for AI-API consumption, MCP transport risks, and GraphQL query complexity attacks.
Generate an auditable API inventory and prioritized remediation roadmap by conducting a full security assessment that outputs structured tables, OWASP risk scorecards, and rate-limit policy ledgers for stakeholder reporting.
salmanabdurrahmanEnumerate REST, GraphQL, and gRPC endpoints via schema analysis and active discovery.
jassicsMap controls to evidence and prioritize remediation actions for compliance frameworks.
akashp1712Detect prompt injection patterns and reject them with a fixed block message.
trilwuIdentify and exploit API security weaknesses across REST and GraphQL endpoints.
