http-request
Facilitates making HTTP requests using curl, supporting various methods and authentication for seamless API interactions.
Install this skill
Security score
The http-request skill was audited on Mar 1, 2026 and we found 44 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 14 | exec: curl -s "https://api.example.com/endpoint" |
Curl to non-GitHub URL
| 19 | exec: curl -s -H "Accept: application/json" -H "Authorization: Bearer TOKEN" "https://api.example.com/endpoint" |
Curl to non-GitHub URL
| 24 | exec: curl -sI "https://example.com" |
Curl to non-GitHub URL
| 29 | exec: curl -si "https://example.com" |
Curl to non-GitHub URL
| 36 | exec: curl -s -X POST "https://api.example.com/endpoint" -H "Content-Type: application/json" -d '{"key":"value","name":"test"}' |
Curl to non-GitHub URL
| 41 | exec: curl -s -X POST "https://api.example.com/endpoint" -d "field1=value1&field2=value2" |
Curl to non-GitHub URL
| 47 | exec: curl -s -X PUT "https://api.example.com/resource/1" -H "Content-Type: application/json" -d '{"key":"updated"}' |
Curl to non-GitHub URL
| 51 | exec: curl -s -X PATCH "https://api.example.com/resource/1" -H "Content-Type: application/json" -d '{"field":"patched"}' |
Curl to non-GitHub URL
| 55 | exec: curl -s -X DELETE "https://api.example.com/resource/1" |
Curl to non-GitHub URL
| 62 | exec: curl -s -H "Authorization: Bearer TOKEN" "https://api.example.com/me" |
Curl to non-GitHub URL
| 67 | exec: curl -s -u "username:password" "https://api.example.com/endpoint" |
Curl to non-GitHub URL
| 72 | exec: curl -s -H "X-API-Key: KEY" "https://api.example.com/endpoint" |
Curl to non-GitHub URL
| 79 | exec: curl -s -X POST "https://api.example.com/upload" -F "file=@/path/to/file.pdf" -F "description=My file" |
Curl to non-GitHub URL
| 86 | exec: curl -sL -o /path/to/output.zip "https://example.com/file.zip" |
Curl to non-GitHub URL
| 91 | exec: curl -L -o /path/to/output.zip "https://example.com/file.zip" |
Curl to non-GitHub URL
| 98 | exec: curl -s "https://api.example.com/data" | jq '.results[0].name' |
Curl to non-GitHub URL
| 103 | exec: curl -s "https://api.example.com/data" | jq . |
Curl to non-GitHub URL
| 108 | exec: curl -s "https://api.example.com/items" | jq '[.[] | select(.status == "active")]' |
Curl to non-GitHub URL
| 115 | exec: curl -s -o /dev/null -w "HTTP %{http_code} | Time: %{time_total}s | Size: %{size_download} bytes\n" "https://example.com" |
Curl to non-GitHub URL
| 120 | exec: curl -v "https://example.com" 2>&1 | head -30 |
Curl to non-GitHub URL
| 126 | exec: curl -sL "https://short.url/abc" |
Curl to non-GitHub URL
| 133 | exec: curl -s -H "Authorization: token GITHUB_TOKEN" "https://api.github.com/user/repos?per_page=5" | jq '.[].full_name' |
External URL reference
| 14 | exec: curl -s "https://api.example.com/endpoint" |
External URL reference
| 19 | exec: curl -s -H "Accept: application/json" -H "Authorization: Bearer TOKEN" "https://api.example.com/endpoint" |
External URL reference
| 24 | exec: curl -sI "https://example.com" |
External URL reference
| 29 | exec: curl -si "https://example.com" |
External URL reference
| 36 | exec: curl -s -X POST "https://api.example.com/endpoint" -H "Content-Type: application/json" -d '{"key":"value","name":"test"}' |
External URL reference
| 41 | exec: curl -s -X POST "https://api.example.com/endpoint" -d "field1=value1&field2=value2" |
External URL reference
| 47 | exec: curl -s -X PUT "https://api.example.com/resource/1" -H "Content-Type: application/json" -d '{"key":"updated"}' |
External URL reference
| 51 | exec: curl -s -X PATCH "https://api.example.com/resource/1" -H "Content-Type: application/json" -d '{"field":"patched"}' |
External URL reference
| 55 | exec: curl -s -X DELETE "https://api.example.com/resource/1" |
External URL reference
| 62 | exec: curl -s -H "Authorization: Bearer TOKEN" "https://api.example.com/me" |
External URL reference
| 67 | exec: curl -s -u "username:password" "https://api.example.com/endpoint" |
External URL reference
| 72 | exec: curl -s -H "X-API-Key: KEY" "https://api.example.com/endpoint" |
External URL reference
| 79 | exec: curl -s -X POST "https://api.example.com/upload" -F "file=@/path/to/file.pdf" -F "description=My file" |
External URL reference
| 86 | exec: curl -sL -o /path/to/output.zip "https://example.com/file.zip" |
External URL reference
| 91 | exec: curl -L -o /path/to/output.zip "https://example.com/file.zip" |
External URL reference
| 98 | exec: curl -s "https://api.example.com/data" | jq '.results[0].name' |
External URL reference
| 103 | exec: curl -s "https://api.example.com/data" | jq . |
External URL reference
| 108 | exec: curl -s "https://api.example.com/items" | jq '[.[] | select(.status == "active")]' |
External URL reference
| 115 | exec: curl -s -o /dev/null -w "HTTP %{http_code} | Time: %{time_total}s | Size: %{size_download} bytes\n" "https://example.com" |
External URL reference
| 120 | exec: curl -v "https://example.com" 2>&1 | head -30 |
External URL reference
| 126 | exec: curl -sL "https://short.url/abc" |
External URL reference
| 133 | exec: curl -s -H "Authorization: token GITHUB_TOKEN" "https://api.github.com/user/repos?per_page=5" | jq '.[].full_name' |
Install this skill with one command
/learn @linanwx/http-request