# APISecurityTester

> Specialized testing for RESTful, GraphQL APIs, and JWT/OAuth mechanisms.

- Skill: `helloeveryboby/apisecuritytester` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add helloeveryboby/apisecuritytester`
- Raw SKILL.md: https://api.skillmd.com/api/skills/helloeveryboby/apisecuritytester/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: helloeveryboby (https://skillmd.com/u/helloeveryboby)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/helloeveryboby/apisecuritytester

---


# APISecurityTester

Butler's API security specialist. It focuses on modern interface vulnerabilities like GraphQL depth limits, JWT claim tampering, and OAuth flow defects.

## Capabilities
- **JWT Analysis**: Decodes and tests for common JWT vulnerabilities (alg: none, weak secrets).
- **GraphQL Testing**: Introspection checks and complexity analysis.
- **REST Audit**: Automated scanning of REST endpoints.