# API Security

> Skills for testing API security including GraphQL and REST API vulnerabilities.

- Skill: `omkar-ukirde/api-security` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add omkar-ukirde/api-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/omkar-ukirde/api-security/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: omkar-ukirde (https://skillmd.com/u/omkar-ukirde)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/omkar-ukirde/api-security

---


# API Security

Testing REST and GraphQL API endpoints for vulnerabilities.

## Skills

- [GraphQL Attacks](references/graphql-attacks.md) - GraphQL-specific vulnerabilities
- [API Testing](references/api-testing.md) - REST API security testing

## Quick Reference

| API Type | Common Issues | Tools |
|----------|---------------|-------|
| REST | IDOR, Auth, Mass Assignment | Burp, Postman |
| GraphQL | Introspection, DoS, Auth | InQL, graphql-cop |