Alternatives to api-security-testing
50 AI Skills apps to use instead, best rated first.
Top picks
- W
webapp-testing
LaunchNative Python Playwright scripts for testing local web applications with server lifecycle management. Includes with_server.py helper to automatically start and manage single or multiple servers before running automation scripts. Supports re
- C
content-research-writer
LaunchAssists in writing high-quality content by conducting research, adding citations, improving hooks, iterating on outlines, and providing real-time feedback on
- O
openhue
Launchopenhue is an agent skill from the OpenClaw project, listed on skills.sh. It lets an agent control Philips Hue lights and scenes through a Hue Bridge with the OpenHue CLI: turn lights on and off, dim rooms, set scenes such as movie mode, an
- B
batch-grill-me
Launchbatch-grill-me is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It interviews you relentlessly about a plan until you share an understanding. It maps decisions as a tree and asks every question it can answer now
- I
implement
Launchimplement is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It implements work from a spec or tickets: it fetches the ticket, works test-first at agreed seams, runs type checks and tests as it goes, reviews the re
- F
frontend-design
LaunchDistinctive, production-grade frontend interfaces that reject generic AI aesthetics through intentional design choices. Guides aesthetic direction selection (brutalist, maximalist, retro-futuristic, luxury, organic, etc.) before implementat
More AI Skills apps
brainstorming
Transform rough ideas into fully-formed designs through structured questioning
finishing-a-development-branch
Guides completion of development work by presenting clear options
test-driven-development
Use when implementing any feature or bugfix, before writing implementation code
About api-security-testing
api-security-testing
Security-test a REST, GraphQL, or gRPC API with Strix
api-security-testing is a skill from the Strix project for security-testing a REST, GraphQL or gRPC API with autonomous agents. It explains why APIs need a different approach from web interfaces: there is no rendered surface to crawl, the most serious bugs are about authorization rather than injection, and the same endpoint can behave differently for each token. The workflow starts by gathering what the agents need. A schema, such as an OpenAPI or Swagger file, a Postman collection, a GraphQL endpoint or a gRPC proto file, lets the agents enumerate endpoints instead of guessing, and an OpenAPI or Postman file can be passed directly, while a proto file is passed as a workspace file. Two sets of credentials, ideally in different tenants, are needed to prove broken object-level authorization, and a low-privilege and a high-privilege token help prove function-level authorization problems. The skill also asks for example object IDs, out-of-scope routes, and any rate limits or web application firewall in front of the API. It uses the OWASP API Security Top 10 from 2023 as its coverage checklist. Only test APIs you own or are authorized to test, and prefer a staging environment, since the agents send real exploit payloads. It passes Gen Agent Trust Hub and Snyk on skills.sh, and Socket shows a warning. It has about 10,200 installs. Install it with npx skills add https://github.com/usestrix/strix --skill api-security-testing.
- Price
- Free
- Made by
- usestrix
- Category
- AI Skills
- Website
- github.com/usestrix/strix/api-security-testing