api-test

Tests API endpoints for the MCP Finance app, ensuring authentication, data validation, and error handling are functioning correctly.

Install this skill

0/100

Security score

The api-test skill was audited on Feb 27, 2026 and we found 39 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 177

Template literal with variable interpolation in command context

SourceSKILL.md

177	const response = await fetch(`${BASE_URL}${path}`, options);

medium line 180

Template literal with variable interpolation in command context

SourceSKILL.md

180	console.log(`✓ ${method} ${path}: ${response.status}`);

medium line 185

Template literal with variable interpolation in command context

SourceSKILL.md

185	console.error(`✗ Error testing ${path}:`, error.message);

medium line 25

Curl to non-GitHub URL

SourceSKILL.md

25	curl http://localhost:3000/api/health

medium line 69

Curl to non-GitHub URL

SourceSKILL.md

69	curl -X GET http://localhost:3000/api/transactions \

medium line 80

Curl to non-GitHub URL

SourceSKILL.md

80	curl -X GET http://localhost:3000/api/transactions \

medium line 90

Curl to non-GitHub URL

SourceSKILL.md

90	curl -X POST http://localhost:3000/api/transactions \

medium line 122

Curl to non-GitHub URL

SourceSKILL.md

122	curl -X POST http://localhost:3000/api/transactions \

medium line 136

Curl to non-GitHub URL

SourceSKILL.md

136	curl -X POST http://localhost:3000/api/transactions \

medium line 150

Curl to non-GitHub URL

SourceSKILL.md

150	curl -X GET http://localhost:3000/api/stocks

medium line 293

Curl to non-GitHub URL

SourceSKILL.md

293	curl -w "@curl-format.txt" -o /dev/null -s http://localhost:3000/api/stocks

medium line 325

Curl to non-GitHub URL

SourceSKILL.md

325	curl http://localhost:3000/api/health

medium line 328

Curl to non-GitHub URL

SourceSKILL.md

328	curl http://localhost:3000/api/stocks \| jq

medium line 331

Curl to non-GitHub URL

SourceSKILL.md

331	curl http://localhost:3000/api/stocks/AAPL \| jq

medium line 334

Curl to non-GitHub URL

SourceSKILL.md

334	curl -v http://localhost:3000/api/health

medium line 337

Curl to non-GitHub URL

SourceSKILL.md

337	curl http://localhost:3000/api/stocks > response.json

medium line 340

Curl to non-GitHub URL

SourceSKILL.md

340	curl -H "Authorization: Bearer TOKEN" http://localhost:3000/api/stocks

medium line 343

Curl to non-GitHub URL

SourceSKILL.md

343	curl -X POST http://localhost:3000/api/endpoint \

medium line 59

Webhook reference - potential data exfiltration

SourceSKILL.md

59	### Webhook Endpoints

medium line 61

Webhook reference - potential data exfiltration

SourceSKILL.md

61	- `POST /api/webhooks/clerk` - Clerk webhooks

medium line 62

Webhook reference - potential data exfiltration

SourceSKILL.md

62	- `POST /api/webhooks/stripe` - Stripe webhooks

medium line 308

Access to .env file

SourceSKILL.md

308	1. Ensure Clerk is configured in .env

low line 20

External URL reference

SourceSKILL.md

20	Wait for the server to start (usually at http://localhost:3000).

low line 25

External URL reference

SourceSKILL.md

25	curl http://localhost:3000/api/health

low line 69

External URL reference

SourceSKILL.md

69	curl -X GET http://localhost:3000/api/transactions \

low line 80

External URL reference

SourceSKILL.md

80	curl -X GET http://localhost:3000/api/transactions \

low line 90

External URL reference

SourceSKILL.md

90	curl -X POST http://localhost:3000/api/transactions \

low line 122

External URL reference

SourceSKILL.md

122	curl -X POST http://localhost:3000/api/transactions \

low line 136

External URL reference

SourceSKILL.md

136	curl -X POST http://localhost:3000/api/transactions \

low line 150

External URL reference

SourceSKILL.md

150	curl -X GET http://localhost:3000/api/stocks

low line 161

External URL reference

SourceSKILL.md

161	const BASE_URL = "http://localhost:3000";

low line 293

External URL reference

SourceSKILL.md

293	curl -w "@curl-format.txt" -o /dev/null -s http://localhost:3000/api/stocks

low line 325

External URL reference

SourceSKILL.md

325	curl http://localhost:3000/api/health

low line 328

External URL reference

SourceSKILL.md

328	curl http://localhost:3000/api/stocks \| jq

low line 331

External URL reference

SourceSKILL.md

331	curl http://localhost:3000/api/stocks/AAPL \| jq

low line 334

External URL reference

SourceSKILL.md

334	curl -v http://localhost:3000/api/health

low line 337

External URL reference

SourceSKILL.md

337	curl http://localhost:3000/api/stocks > response.json

low line 340

External URL reference

SourceSKILL.md

340	curl -H "Authorization: Bearer TOKEN" http://localhost:3000/api/stocks

low line 343

External URL reference

SourceSKILL.md

343	curl -X POST http://localhost:3000/api/endpoint \

Scanned on Feb 27, 2026

View Security Dashboard

Installation guide →

GitHub Stars 2

Rate this skill

Categorydevelopment

UpdatedMay 21, 2026

openclaw api testing backend-developer qa-engineer devops-sre development

diegosouzapw/awesome-omni-skill