← All skills
offensive-api-security
92 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By SnailSploit/Claude-Red (GitHub) · coding · 10,590 stars · scanned at commit a8de813
Comprehensive API security testing methodology covering REST, gRPC, and WebSocket attack surfaces. Addresses the full OWASP API Security Top 10 2023 including BOLA/IDOR, broken authentication, excessive data exposure, rate limiting bypass, BFLA, mass assignment, SSRF, and security misconfiguration. Includes REST-specific attacks such as HTTP verb tampering, content-type switching, and parameter pollution. Covers gRPC exploitation through protobuf interception, reflection API enumeration, and me…
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 22 places.
Show 17 more
- Skills/api/offensive-api-security/SKILL.md, line 85
for i in $(seq 1 100); do - Skills/api/offensive-api-security/SKILL.md, line 98
curl -s -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 106
curl -s -o /dev/null -w "Expired: %{http_code}\n" \ - Skills/api/offensive-api-security/SKILL.md, line 129
for i in $(seq 1 50); do - Skills/api/offensive-api-security/SKILL.md, line 140
curl -s -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 161
admin_endpoints=( - Skills/api/offensive-api-security/SKILL.md, line 182
curl -s -X PUT \ - Skills/api/offensive-api-security/SKILL.md, line 204
for method in GET POST PUT PATCH DELETE OPTIONS HEAD TRACE; do - Skills/api/offensive-api-security/SKILL.md, line 214
curl -s -X POST \ - Skills/api/offensive-api-security/SKILL.md, line 229
curl -s -X POST -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 251
ssrf_payloads=( - Skills/api/offensive-api-security/SKILL.md, line 273
curl -s -X POST -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 292
grpcurl -plaintext target.example.com:50051 list - Skills/api/offensive-api-security/SKILL.md, line 299
grpcurl -plaintext \ - Skills/api/offensive-api-security/SKILL.md, line 314
grpcurl -plaintext \ - Skills/api/offensive-api-security/SKILL.md, line 353
websocat -H "Origin: https://evil.example.com" "wss://target.example.com/ws/chat" - Skills/api/offensive-api-security/SKILL.md, line 412
versions=("v1" "v2" "v3" "v0" "v1-beta" "v2-beta" "internal" "latest" "dev" "staging")
and 2 more places
Connects to the internet
This is disclosed by the author in the skill's SKILL.md or README.
Found in 29 places.
Show 17 more
- Skills/api/offensive-api-security/SKILL.md, line 86
code=$(curl -s -o /dev/null -w "%{http_code}" \ - Skills/api/offensive-api-security/SKILL.md, line 98
curl -s -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 106
curl -s -o /dev/null -w "Expired: %{http_code}\n" \ - Skills/api/offensive-api-security/SKILL.md, line 110
curl -s -o /dev/null -w "Pre-change: %{http_code}\n" \ - Skills/api/offensive-api-security/SKILL.md, line 115
curl -s -o /dev/null -w "Value '${val}' -> %{http_code}\n" \ - Skills/api/offensive-api-security/SKILL.md, line 130
curl -s -D - -o /dev/null \ - Skills/api/offensive-api-security/SKILL.md, line 140
curl -s -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 147
" | curl -s -o /dev/null -w "Large payload: %{http_code}\n" \ - Skills/api/offensive-api-security/SKILL.md, line 173
code=$(curl -s -o /dev/null -w "%{http_code}" \ - Skills/api/offensive-api-security/SKILL.md, line 182
curl -s -X PUT \ - Skills/api/offensive-api-security/SKILL.md, line 205
code=$(curl -s -o /dev/null -w "%{http_code}" \ - Skills/api/offensive-api-security/SKILL.md, line 214
curl -s -X POST \ - Skills/api/offensive-api-security/SKILL.md, line 219
curl -s -X POST \ - Skills/api/offensive-api-security/SKILL.md, line 229
curl -s -X POST -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 234
curl -s -X POST -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 240
curl -s -H "Authorization: Bearer $TOKEN" \ - Skills/api/offensive-api-security/SKILL.md, line 262
curl -s -X POST -H "Authorization: Bearer $TOKEN" \
and 9 more places
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'offensive-api-security' ] || [ -L ~/.agents/skills/'offensive-api-security' ]; then echo 'A skill folder named offensive-api-security already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/SnailSploit/Claude-Red' "$d" && git -C "$d" checkout --quiet 'a8de813edc9f66f60d44cfe42d47750e89d9930b' -- 'Skills/api/offensive-api-security' && mkdir -p ~/.agents/skills && cp -R "$d"/'Skills/api/offensive-api-security' ~/.agents/skills/'offensive-api-security' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'offensive-api-security' ~/.claude/skills/'offensive-api-security' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for SnailSploit/Claude-Red shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/SnailSploit/Claude-Red/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | a8de813 | 92 |
| 2026-11-07 | a8de813 | 82 |