“GraphQL”

Operate Linear through its GraphQL API using Agent Vault access, verified reads and mutations, and polished, bloat-free UI presentation patterns.

Debugs REST and GraphQL APIs: unexpected status codes or bodies, auth failures (401/403, OAuth, API keys), schema mismatches, rate limits, pagination, and…

Executes a GraphQL query or mutation against the LightSource API.

Use when testing GraphQL APIs for common vulnerabilities including introspection exploitation, authorization bypasses, batching abuse, and denial of service.

Assessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized…

IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR…

GraphQL IDOR/auth-bypass, XXE file-read/SSRF (SVG/DOCX/SAML), SSTI detection and RCE.

Interact with Linear project management - query issues, update status, create tickets, and manage workflows using the Linear GraphQL API.

Design, implement, debug, and optimize API integrations with expert-level patterns for REST, GraphQL, webhooks, and authentication flows.

Fetches complete Airbnb listing details for a given numeric listing ID via the internal GraphQL API, returning title, room type, description, amenities…

Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements.

Debug REST, GraphQL, webhook, and OAuth/API-key integrations with layered request, auth, schema, and response checks.

Test REST and GraphQL APIs with Playwright APIRequestContext, Supertest, or standalone HTTP clients.

Linear issue tracking and project management through the CLI or GraphQL API.

Guide for using Apollo MCP Server to connect AI agents with GraphQL APIs.

Integrates and debugs third-party REST and GraphQL APIs: auth, rate limits, pagination, webhooks, with reference for 147 services.

Manage Linear issues, projects, and teams via the GraphQL API.

Property-based testing of HTTP APIs against an OpenAPI or GraphQL specification using Schemathesis.

This skill should be used when the user asks to "test API security", "fuzz APIs", "find IDOR vulnerabilities", "test REST API", "test GraphQL", "API…

Security-test a REST, GraphQL, or gRPC API — enumerate endpoints from an OpenAPI/GraphQL/Postman schema (or by crawling), then actually exploit the…

Use when enumerating API surface (OpenAPI/Swagger, GraphQL introspection, versioned or undocumented endpoints) and probing API object graphs for BOLA/IDOR.

Shopify Admin & Storefront GraphQL APIs via curl, with Bankr-native bridges.

Correct way to call the Railway GraphQL API for the Open Manus fleet (verify deploys, read service variables, list services).

Manage Linear issues, projects, and teams via the GraphQL API.