Skip to main content

curl-command-generator

Generates cURL commands for API testing from various frameworks, simplifying command line interactions with proper headers and authentication.

Install this skill

or
0/100

Security score

The curl-command-generator skill was audited on Feb 9, 2026 and we found 63 security issues across 4 threat categories, including 7 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

medium line 80

Template literal with variable interpolation in command context

SourceSKILL.md
80parts.push(`-X ${route.method}`);
medium line 83

Template literal with variable interpolation in command context

SourceSKILL.md
83let url = `${options.baseUrl}${route.path}`;
medium line 91

Template literal with variable interpolation in command context

SourceSKILL.md
91.map((p) => `${p.name}=${p.value}`)
medium line 93

Template literal with variable interpolation in command context

SourceSKILL.md
93url += `?${queryString}`;
medium line 96

Template literal with variable interpolation in command context

SourceSKILL.md
96parts.push(`"${url}"`);
medium line 104

Template literal with variable interpolation in command context

SourceSKILL.md
104parts.push(`-H "${options.authHeader}"`);
medium line 110

Template literal with variable interpolation in command context

SourceSKILL.md
110parts.push(`-d '${bodyJson}'`);
medium line 125

Template literal with variable interpolation in command context

SourceSKILL.md
125lines.push(`Base URL: \`${options.baseUrl}\``);
medium line 130

Template literal with variable interpolation in command context

SourceSKILL.md
130lines.push(`BASE_URL="${options.baseUrl}"`);
medium line 140

Template literal with variable interpolation in command context

SourceSKILL.md
140lines.push(`## ${capitalize(resource)}`);
medium line 143

Template literal with variable interpolation in command context

SourceSKILL.md
143lines.push(`# ${capitalize(resource)}`);
medium line 149

Template literal with variable interpolation in command context

SourceSKILL.md
149lines.push(`### ${route.name}`);
medium line 156

Template literal with variable interpolation in command context

SourceSKILL.md
156lines.push(`# ${route.name}`);
medium line 263

Template literal with variable interpolation in command context

SourceSKILL.md
263```bash
medium line 387

Template literal with variable interpolation in command context

SourceSKILL.md
387```bash
medium line 448

Template literal with variable interpolation in command context

SourceSKILL.md
448console.log(`Generated ${options.output} with ${routes.length} commands`);
medium line 23

Curl to non-GitHub URL

SourceSKILL.md
23curl -X GET "http://localhost:3000/api/users"
medium line 26

Curl to non-GitHub URL

SourceSKILL.md
26curl -X POST "http://localhost:3000/api/users" \
medium line 31

Curl to non-GitHub URL

SourceSKILL.md
31curl -X GET "http://localhost:3000/api/users" \
medium line 35

Curl to non-GitHub URL

SourceSKILL.md
35curl -X GET "http://localhost:3000/api/users?page=1&limit=10"
medium line 38

Curl to non-GitHub URL

SourceSKILL.md
38curl -i -X GET "http://localhost:3000/api/users"
medium line 41

Curl to non-GitHub URL

SourceSKILL.md
41curl -v -X GET "http://localhost:3000/api/users"
high line 206

Curl to non-GitHub URL

SourceSKILL.md
206curl -X POST "http://localhost:3000/api/auth/login" \
high line 214

Curl to non-GitHub URL

SourceSKILL.md
214curl -X POST "http://localhost:3000/api/auth/register" \
high line 224

Curl to non-GitHub URL

SourceSKILL.md
224curl -X GET "http://localhost:3000/api/users?page=1&limit=10" \
high line 231

Curl to non-GitHub URL

SourceSKILL.md
231curl -X GET "http://localhost:3000/api/users/{id}" \
high line 238

Curl to non-GitHub URL

SourceSKILL.md
238curl -X POST "http://localhost:3000/api/users" \
high line 247

Curl to non-GitHub URL

SourceSKILL.md
247curl -X PUT "http://localhost:3000/api/users/{id}" \
high line 256

Curl to non-GitHub URL

SourceSKILL.md
256curl -X DELETE "http://localhost:3000/api/users/{id}" \
medium line 336

Curl to non-GitHub URL

SourceSKILL.md
336curl -X GET "http://localhost:3000/api/users" \
medium line 351

Curl to non-GitHub URL

SourceSKILL.md
351curl -s "http://localhost:3000/api/users" | jq .
medium line 354

Curl to non-GitHub URL

SourceSKILL.md
354curl -c cookies.txt -b cookies.txt "http://localhost:3000/api/auth/login"
medium line 357

Curl to non-GitHub URL

SourceSKILL.md
357curl -X POST "http://localhost:3000/api/upload" \
medium line 362

Curl to non-GitHub URL

SourceSKILL.md
362curl -X POST "http://localhost:3000/api/form" \
medium line 366

Curl to non-GitHub URL

SourceSKILL.md
366curl -X GET "http://localhost:3000/api/users" \
low line 373

Access to .env file

SourceSKILL.md
373# .env.curl
low line 392

Access to .env file

SourceSKILL.md
392source .env.curl
low line 23

External URL reference

SourceSKILL.md
23curl -X GET "http://localhost:3000/api/users"
low line 26

External URL reference

SourceSKILL.md
26curl -X POST "http://localhost:3000/api/users" \
low line 31

External URL reference

SourceSKILL.md
31curl -X GET "http://localhost:3000/api/users" \
low line 35

External URL reference

SourceSKILL.md
35curl -X GET "http://localhost:3000/api/users?page=1&limit=10"
low line 38

External URL reference

SourceSKILL.md
38curl -i -X GET "http://localhost:3000/api/users"
low line 41

External URL reference

SourceSKILL.md
41curl -v -X GET "http://localhost:3000/api/users"
low line 199

External URL reference

SourceSKILL.md
199Base URL: `http://localhost:3000/api`
low line 206

External URL reference

SourceSKILL.md
206curl -X POST "http://localhost:3000/api/auth/login" \
low line 214

External URL reference

SourceSKILL.md
214curl -X POST "http://localhost:3000/api/auth/register" \
low line 224

External URL reference

SourceSKILL.md
224curl -X GET "http://localhost:3000/api/users?page=1&limit=10" \
low line 231

External URL reference

SourceSKILL.md
231curl -X GET "http://localhost:3000/api/users/{id}" \
low line 238

External URL reference

SourceSKILL.md
238curl -X POST "http://localhost:3000/api/users" \
low line 247

External URL reference

SourceSKILL.md
247curl -X PUT "http://localhost:3000/api/users/{id}" \
low line 256

External URL reference

SourceSKILL.md
256curl -X DELETE "http://localhost:3000/api/users/{id}" \
low line 267

External URL reference

SourceSKILL.md
267BASE_URL="${BASE_URL:-http://localhost:3000/api}"
low line 336

External URL reference

SourceSKILL.md
336curl -X GET "http://localhost:3000/api/users" \
low line 351

External URL reference

SourceSKILL.md
351curl -s "http://localhost:3000/api/users" | jq .
low line 354

External URL reference

SourceSKILL.md
354curl -c cookies.txt -b cookies.txt "http://localhost:3000/api/auth/login"
low line 357

External URL reference

SourceSKILL.md
357curl -X POST "http://localhost:3000/api/upload" \
low line 362

External URL reference

SourceSKILL.md
362curl -X POST "http://localhost:3000/api/form" \
low line 366

External URL reference

SourceSKILL.md
366curl -X GET "http://localhost:3000/api/users" \
low line 375

External URL reference

SourceSKILL.md
375DEV_URL="http://localhost:3000/api"
low line 379

External URL reference

SourceSKILL.md
379STAGING_URL="https://staging-api.example.com"
low line 383

External URL reference

SourceSKILL.md
383PROD_URL="https://api.example.com"
low line 430

External URL reference

SourceSKILL.md
430.option("-b, --base-url <url>", "Base URL", "http://localhost:3000/api")
low line 458

External URL reference

SourceSKILL.md
458BASE_URL ?= http://localhost:3000/api
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →