“GraphQL”

Design RESTful and GraphQL APIs with consistency, versioning, and documentation

Apply Apollo Client conventions for GraphQL cache identity, queries, mutations, fragments and normalization when Apollo is present.

Design OpenAPI/Swagger specs, GraphQL schemas, type definitions, and mock data for clean frontend-backend integration.

Property-based testing of HTTP APIs against an OpenAPI or GraphQL specification using Schemathesis.

Use when removing, renaming or changing a public API, event contract, GraphQL or gRPC surface, or a client or SDK that another repository or a customer uses.

Review Petoria product API consistency across GraphQL operations, DTOs, schemas, enums, filters, and remaining legacy terminology.

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API…

Security-test a REST, GraphQL, or gRPC API — enumerate endpoints from an OpenAPI/GraphQL/Postman schema (or by crawling), then actually exploit the…

Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight developers.

Use for REST or GraphQL object, property, function, tenant, relationship, lifecycle, batch, export, job, and API-version authorization boundaries; do not…

Use when enumerating API surface (OpenAPI/Swagger, GraphQL introspection, versioned or undocumented endpoints) and probing API object graphs for BOLA/IDOR.

Comprehensive API design patterns covering REST, GraphQL, gRPC, versioning, authentication, and modern API best practices

Shopify Admin & Storefront GraphQL APIs via curl, with Bankr-native bridges.

.NET Web 入口与参数映射分析工具。从 ASP.NET Core、MVC、Web API、Minimal API、SignalR、GraphQL、WCF 源码中提取完整入口、参数结构与请求模板。

.NET 入口到 Sink 的多层数据流追踪工具。根据 route_id 追踪从 Controller、Minimal API、Hub、GraphQL Resolver、WCF Service 到最终敏感操作点的证据链，不输出漏洞结论。

Query the ENCODE Registry of cis-Regulatory Elements (cCREs) via the SCREEN GraphQL API, or make custom queries to the ENCODE Portal REST API for experiments…

Specialized testing for RESTful, GraphQL APIs, and JWT/OAuth mechanisms.

GitHub CLI (gh) and API operations for branches, PRs, issues, releases, workflows, and GraphQL queries.

Reviews API-specific vulnerabilities - BOLA/IDOR, broken function-level authorization, mass assignment, rate limiting, excessive data exposure, GraphQL…

Discovers X (Twitter) user original posts only (no replies, retweets, or quote tweets) via logged-in GraphQL (Cookie auth_token+ct0), with FxEmbed /…

Systematic REST and GraphQL API endpoint testing: happy path, error cases, auth flows, rate limits, schema validation.

Security-first MCP server that connects any OpenAPI, GraphQL, gRPC or SOAP API to AI agents.

Auto-generate comprehensive API tests for REST and GraphQL endpoints with request/response validation

Guide for writing idiomatic Rust code based on Apollo GraphQL's best practices handbook.