api-tester
Facilitates quick API endpoint testing with comprehensive validation for requests and responses, enhancing development efficiency.
Install this skill
Security score
The api-tester skill was audited on Feb 27, 2026 and we found 63 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 88 | throw new Error(`HTTP error! status: ${response.status}`); |
Template literal with variable interpolation in command context
| 357 | 'Authorization': `Bearer ${token}` |
Template literal with variable interpolation in command context
| 432 | 'Authorization': `Bearer ${token}` |
Curl to non-GitHub URL
| 58 | # curl |
Curl to non-GitHub URL
| 63 | curl -X GET https://api.example.com/api/users \ |
Curl to non-GitHub URL
| 68 | curl -X GET "https://api.example.com/api/users?page=1&limit=10&sort=created_at" \ |
Curl to non-GitHub URL
| 72 | curl -v -X GET https://api.example.com/api/users |
Curl to non-GitHub URL
| 155 | # curl |
Curl to non-GitHub URL
| 166 | curl -X POST https://api.example.com/api/users \ |
Curl to non-GitHub URL
| 262 | curl -X PUT https://api.example.com/api/users/123 \ |
Curl to non-GitHub URL
| 272 | curl -X PATCH https://api.example.com/api/users/123 \ |
Curl to non-GitHub URL
| 284 | curl -X DELETE https://api.example.com/api/users/123 \ |
Curl to non-GitHub URL
| 288 | curl -X DELETE https://api.example.com/api/users/123 \ |
Curl to non-GitHub URL
| 298 | curl -X POST https://api.example.com/auth/login \ |
Curl to non-GitHub URL
| 306 | curl -X GET https://api.example.com/api/users \ |
Curl to non-GitHub URL
| 313 | curl -X GET https://api.example.com/api/users \ |
Curl to non-GitHub URL
| 317 | curl -X GET "https://api.example.com/api/users?api_key=your-api-key-here" |
Curl to non-GitHub URL
| 323 | curl -X GET https://api.example.com/api/users \ |
Curl to non-GitHub URL
| 327 | curl -X GET https://api.example.com/api/users \ |
Curl to non-GitHub URL
| 369 | # curl |
Curl to non-GitHub URL
| 378 | curl -X POST https://api.example.com/graphql \ |
Fetch to external URL
| 79 | const response = await fetch('https://api.example.com/api/users', { |
Fetch to external URL
| 176 | const response = await fetch('https://api.example.com/api/users', { |
Fetch to external URL
| 335 | const response = await fetch('https://oauth.example.com/token', { |
Fetch to external URL
| 355 | const response = await fetch('https://api.example.com/api/users', { |
Fetch to external URL
| 402 | const response = await fetch('https://api.example.com/graphql', { |
Fetch to external URL
| 770 | const response = await fetch('https://api.example.com/api/users/123'); |
External URL reference
| 59 | curl -X GET https://api.example.com/api/users \ |
External URL reference
| 63 | curl -X GET https://api.example.com/api/users \ |
External URL reference
| 68 | curl -X GET "https://api.example.com/api/users?page=1&limit=10&sort=created_at" \ |
External URL reference
| 72 | curl -v -X GET https://api.example.com/api/users |
External URL reference
| 79 | const response = await fetch('https://api.example.com/api/users', { |
External URL reference
| 100 | const response = await axios.get('https://api.example.com/api/users', { |
External URL reference
| 122 | response = requests.get('https://api.example.com/api/users') |
External URL reference
| 138 | 'https://api.example.com/api/users', |
External URL reference
| 156 | curl -X POST https://api.example.com/api/users \ |
External URL reference
| 166 | curl -X POST https://api.example.com/api/users \ |
External URL reference
| 176 | const response = await fetch('https://api.example.com/api/users', { |
External URL reference
| 204 | 'https://api.example.com/api/users', |
External URL reference
| 246 | 'https://api.example.com/api/users', |
External URL reference
| 262 | curl -X PUT https://api.example.com/api/users/123 \ |
External URL reference
| 272 | curl -X PATCH https://api.example.com/api/users/123 \ |
External URL reference
| 284 | curl -X DELETE https://api.example.com/api/users/123 \ |
External URL reference
| 288 | curl -X DELETE https://api.example.com/api/users/123 \ |
External URL reference
| 298 | curl -X POST https://api.example.com/auth/login \ |
External URL reference
| 306 | curl -X GET https://api.example.com/api/users \ |
External URL reference
| 313 | curl -X GET https://api.example.com/api/users \ |
External URL reference
| 317 | curl -X GET "https://api.example.com/api/users?api_key=your-api-key-here" |
External URL reference
| 323 | curl -X GET https://api.example.com/api/users \ |
External URL reference
| 327 | curl -X GET https://api.example.com/api/users \ |
External URL reference
| 335 | const response = await fetch('https://oauth.example.com/token', { |
External URL reference
| 355 | const response = await fetch('https://api.example.com/api/users', { |
External URL reference
| 370 | curl -X POST https://api.example.com/graphql \ |
External URL reference
| 378 | curl -X POST https://api.example.com/graphql \ |
External URL reference
| 402 | const response = await fetch('https://api.example.com/graphql', { |
External URL reference
| 426 | const API_URL = 'https://api.example.com'; |
External URL reference
| 535 | API_URL = 'https://api.example.com' |
External URL reference
| 590 | "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json" |
External URL reference
| 684 | "value": "https://api.example.com" |
External URL reference
| 696 | https://api.example.com/api/users |
External URL reference
| 701 | https://api.example.com/api/users |
External URL reference
| 708 | target: 'https://api.example.com' |
External URL reference
| 770 | const response = await fetch('https://api.example.com/api/users/123'); |