How do I install the Endpoint Pentest skill?

Run npx skillmds@latest add rwcod/endpoint-pentest in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Endpoint Pentest safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Endpoint Pentest?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Endpoint Pentest free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Endpoint Pentest?

rwcod (@rwcod) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Endpoint Pentest by rwcod — Agent Skill

Name: Endpoint Pentest
Author: rwcod

Endpoint Pentest

Authorized, conservative security assessment of the HTTP/API endpoints beside an MCP server. Covers route discovery, OpenAPI/Swagger leakage, auth bypass, IDOR/BOLA, broken function-level authorization, mass assignment, excessive data exposure, SSRF, injection, file upload, webhook signature bypass, CORS, CSRF, rate limiting, and error/debug leakage. Safe-by-default and read-only. Use when testing REST/HTTP APIs in an authorized environment.

rwcod b428460 4 files · 6.4 KB Updated Sep 17, 2026

File contents

Endpoint / API Pentest

Authorized, safe-by-default HTTP/API testing. Read ../../SECURITY_RULES.md first. Conservative rates; owned/staging targets; read-only unless a write is explicitly authorized against a disposable record.

Deliverables

Route inventory
Endpoint Risk Matrix (../../templates/endpoint-risk-matrix.md)
Confirmed / Suspected Findings, Passed Checks
Fix plan + regression tests

Phases

Scope & authorization.
Route discovery — from OpenAPI/Swagger, JS bundles, run-httpx.sh, run-ffuf-safe.sh (owned/staging only), sitemap, robots.
Spec leakage — is OpenAPI/Swagger/GraphQL introspection public? Does it leak internal routes?
AuthN — token validation negative tests (deny expected).
AuthZ — IDOR/BOLA (object level) + broken function-level authorization (admin routes as normal user).
Mass assignment — extra fields (is_admin, role, owner_id) accepted?
Excessive data exposure — responses leaking fields the UI hides.
SSRF — URL/webhook/import params; ../../payloads/ssrf.txt.
Injection — SQL/NoSQL/command/template, safe probes only.
File upload — type/size/content-type validation; path of stored file.
Webhook signature bypass — missing/forged/replayed signatures.
CORS — wildcard + credentials; reflected origin.
CSRF — where cookies authenticate state-changing routes.
Rate limiting & pagination abuse — realistic abuse, low volume.
Cache poisoning — unkeyed headers influencing cached responses.
Error/debug leakage — stack traces, debug endpoints, health endpoints leaking versions/config, admin endpoints exposed.
Request size / timeout — limits enforced.
Sensitive-data logging — tokens/PII in logs.

Full checklist

endpoint-checklist.md. Payloads: payload-catalog.md + ../../payloads/.

Report

report-template.md or hand to security-report-writer.

---name: endpoint-pentestdescription: Authorized, conservative security assessment of the HTTP/API endpoints beside an MCP server. Covers route discovery, OpenAPI/Swagger leakage, auth bypass, IDOR/BOLA, broken function-level authorization, mass assignment, excessive data exposure, SSRF, injection, file upload, webhook signature bypass, CORS, CSRF, rate limiting, and error/debug leakage. Safe-by-default and read-only. Use when testing REST/HTTP APIs in an authorized environment.---# Endpoint / API PentestAuthorized, safe-by-default HTTP/API testing. Read[../../SECURITY_RULES.md](../../SECURITY_RULES.md) first. Conservative rates;owned/staging targets; read-only unless a write is explicitly authorized againsta disposable record.## Deliverables- Route inventory- Endpoint Risk Matrix (`../../templates/endpoint-risk-matrix.md`)- Confirmed / Suspected Findings, Passed Checks- Fix plan + regression tests## Phases1. **Scope & authorization.**2. **Route discovery** — from OpenAPI/Swagger, JS bundles, `run-httpx.sh`, `run-ffuf-safe.sh` (owned/staging only), sitemap, robots.3. **Spec leakage** — is OpenAPI/Swagger/GraphQL introspection public? Does it leak internal routes?4. **AuthN** — token validation negative tests (deny expected).5. **AuthZ** — IDOR/BOLA (object level) + broken function-level authorization (admin routes as normal user).6. **Mass assignment** — extra fields (`is_admin`, `role`, `owner_id`) accepted?7. **Excessive data exposure** — responses leaking fields the UI hides.8. **SSRF** — URL/webhook/import params; `../../payloads/ssrf.txt`.9. **Injection** — SQL/NoSQL/command/template, safe probes only.10. **File upload** — type/size/content-type validation; path of stored file.11. **Webhook signature bypass** — missing/forged/replayed signatures.12. **CORS** — wildcard + credentials; reflected origin.13. **CSRF** — where cookies authenticate state-changing routes.14. **Rate limiting & pagination abuse** — realistic abuse, low volume.15. **Cache poisoning** — unkeyed headers influencing cached responses.16. **Error/debug leakage** — stack traces, debug endpoints, health endpoints leaking versions/config, admin endpoints exposed.17. **Request size / timeout** — limits enforced.18. **Sensitive-data logging** — tokens/PII in logs.## Full checklist`endpoint-checklist.md`. Payloads: `payload-catalog.md` +`../../payloads/`.## Report`report-template.md` or hand to `security-report-writer`.

Frequently asked questions