Skip to main content

api-tester

Facilitates quick API endpoint testing with comprehensive validation for requests and responses, enhancing development efficiency.

Install this skill

or
0/100

Security score

The api-tester skill was audited on Feb 27, 2026 and we found 63 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 88

Template literal with variable interpolation in command context

SourceSKILL.md
88throw new Error(`HTTP error! status: ${response.status}`);
medium line 357

Template literal with variable interpolation in command context

SourceSKILL.md
357'Authorization': `Bearer ${token}`
medium line 432

Template literal with variable interpolation in command context

SourceSKILL.md
432'Authorization': `Bearer ${token}`
medium line 58

Curl to non-GitHub URL

SourceSKILL.md
58# curl
medium line 63

Curl to non-GitHub URL

SourceSKILL.md
63curl -X GET https://api.example.com/api/users \
medium line 68

Curl to non-GitHub URL

SourceSKILL.md
68curl -X GET "https://api.example.com/api/users?page=1&limit=10&sort=created_at" \
medium line 72

Curl to non-GitHub URL

SourceSKILL.md
72curl -v -X GET https://api.example.com/api/users
medium line 155

Curl to non-GitHub URL

SourceSKILL.md
155# curl
medium line 166

Curl to non-GitHub URL

SourceSKILL.md
166curl -X POST https://api.example.com/api/users \
medium line 262

Curl to non-GitHub URL

SourceSKILL.md
262curl -X PUT https://api.example.com/api/users/123 \
medium line 272

Curl to non-GitHub URL

SourceSKILL.md
272curl -X PATCH https://api.example.com/api/users/123 \
medium line 284

Curl to non-GitHub URL

SourceSKILL.md
284curl -X DELETE https://api.example.com/api/users/123 \
medium line 288

Curl to non-GitHub URL

SourceSKILL.md
288curl -X DELETE https://api.example.com/api/users/123 \
medium line 298

Curl to non-GitHub URL

SourceSKILL.md
298curl -X POST https://api.example.com/auth/login \
medium line 306

Curl to non-GitHub URL

SourceSKILL.md
306curl -X GET https://api.example.com/api/users \
medium line 313

Curl to non-GitHub URL

SourceSKILL.md
313curl -X GET https://api.example.com/api/users \
medium line 317

Curl to non-GitHub URL

SourceSKILL.md
317curl -X GET "https://api.example.com/api/users?api_key=your-api-key-here"
medium line 323

Curl to non-GitHub URL

SourceSKILL.md
323curl -X GET https://api.example.com/api/users \
medium line 327

Curl to non-GitHub URL

SourceSKILL.md
327curl -X GET https://api.example.com/api/users \
medium line 369

Curl to non-GitHub URL

SourceSKILL.md
369# curl
medium line 378

Curl to non-GitHub URL

SourceSKILL.md
378curl -X POST https://api.example.com/graphql \
low line 79

Fetch to external URL

SourceSKILL.md
79const response = await fetch('https://api.example.com/api/users', {
low line 176

Fetch to external URL

SourceSKILL.md
176const response = await fetch('https://api.example.com/api/users', {
low line 335

Fetch to external URL

SourceSKILL.md
335const response = await fetch('https://oauth.example.com/token', {
low line 355

Fetch to external URL

SourceSKILL.md
355const response = await fetch('https://api.example.com/api/users', {
low line 402

Fetch to external URL

SourceSKILL.md
402const response = await fetch('https://api.example.com/graphql', {
low line 770

Fetch to external URL

SourceSKILL.md
770const response = await fetch('https://api.example.com/api/users/123');
low line 59

External URL reference

SourceSKILL.md
59curl -X GET https://api.example.com/api/users \
low line 63

External URL reference

SourceSKILL.md
63curl -X GET https://api.example.com/api/users \
low line 68

External URL reference

SourceSKILL.md
68curl -X GET "https://api.example.com/api/users?page=1&limit=10&sort=created_at" \
low line 72

External URL reference

SourceSKILL.md
72curl -v -X GET https://api.example.com/api/users
low line 79

External URL reference

SourceSKILL.md
79const response = await fetch('https://api.example.com/api/users', {
low line 100

External URL reference

SourceSKILL.md
100const response = await axios.get('https://api.example.com/api/users', {
low line 122

External URL reference

SourceSKILL.md
122response = requests.get('https://api.example.com/api/users')
low line 138

External URL reference

SourceSKILL.md
138'https://api.example.com/api/users',
low line 156

External URL reference

SourceSKILL.md
156curl -X POST https://api.example.com/api/users \
low line 166

External URL reference

SourceSKILL.md
166curl -X POST https://api.example.com/api/users \
low line 176

External URL reference

SourceSKILL.md
176const response = await fetch('https://api.example.com/api/users', {
low line 204

External URL reference

SourceSKILL.md
204'https://api.example.com/api/users',
low line 246

External URL reference

SourceSKILL.md
246'https://api.example.com/api/users',
low line 262

External URL reference

SourceSKILL.md
262curl -X PUT https://api.example.com/api/users/123 \
low line 272

External URL reference

SourceSKILL.md
272curl -X PATCH https://api.example.com/api/users/123 \
low line 284

External URL reference

SourceSKILL.md
284curl -X DELETE https://api.example.com/api/users/123 \
low line 288

External URL reference

SourceSKILL.md
288curl -X DELETE https://api.example.com/api/users/123 \
low line 298

External URL reference

SourceSKILL.md
298curl -X POST https://api.example.com/auth/login \
low line 306

External URL reference

SourceSKILL.md
306curl -X GET https://api.example.com/api/users \
low line 313

External URL reference

SourceSKILL.md
313curl -X GET https://api.example.com/api/users \
low line 317

External URL reference

SourceSKILL.md
317curl -X GET "https://api.example.com/api/users?api_key=your-api-key-here"
low line 323

External URL reference

SourceSKILL.md
323curl -X GET https://api.example.com/api/users \
low line 327

External URL reference

SourceSKILL.md
327curl -X GET https://api.example.com/api/users \
low line 335

External URL reference

SourceSKILL.md
335const response = await fetch('https://oauth.example.com/token', {
low line 355

External URL reference

SourceSKILL.md
355const response = await fetch('https://api.example.com/api/users', {
low line 370

External URL reference

SourceSKILL.md
370curl -X POST https://api.example.com/graphql \
low line 378

External URL reference

SourceSKILL.md
378curl -X POST https://api.example.com/graphql \
low line 402

External URL reference

SourceSKILL.md
402const response = await fetch('https://api.example.com/graphql', {
low line 426

External URL reference

SourceSKILL.md
426const API_URL = 'https://api.example.com';
low line 535

External URL reference

SourceSKILL.md
535API_URL = 'https://api.example.com'
low line 590

External URL reference

SourceSKILL.md
590"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
low line 684

External URL reference

SourceSKILL.md
684"value": "https://api.example.com"
low line 696

External URL reference

SourceSKILL.md
696https://api.example.com/api/users
low line 701

External URL reference

SourceSKILL.md
701https://api.example.com/api/users
low line 708

External URL reference

SourceSKILL.md
708target: 'https://api.example.com'
low line 770

External URL reference

SourceSKILL.md
770const response = await fetch('https://api.example.com/api/users/123');
Scanned on Feb 27, 2026
View Security Dashboard
Installation guide →