“GraphQL”

Beginner-friendly reverse-engineering workflow for Graphql Client Reversing.

Trigger automático al trabajar con schemas GraphQL, consultas query/mutation o configuraciones de codegen.

Assessing GraphQL API endpoints for introspection leaks, injection attacks, authorization flaws, and denial-of-service vulnerabilities during authorized…

API design specialist for REST, GraphQL, gRPC, versioning strategies, and developer experienceUse when "api design, rest, graphql, grpc, openapi, swagger…

API design patterns for REST, gRPC, and GraphQL.

Team baseline for external-interface contract artifacts: OpenAPI, JSON Schema, AsyncAPI, .proto, and GraphQL SDL, with spectral, ajv, buf, and…

REST、GraphQL、gRPC の API 設計パターン。 Use when: API の新規設計、OpenAPI 仕様作成、バージョニング/ページネーション設計。 Trigger phrases: API design, REST endpoint, GraphQL schema, OpenAPI…

Shopify Admin API (GraphQL first, REST fallback) の設計・実装時に、公式ドキュメント参照とよくある落とし穴回避をガイドするスキル。Triggers: Shopify Admin API, GraphQL, REST, metafield, refund, order.

Turn any MCP server, OpenAPI spec, or GraphQL endpoint into a CLI.

IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR…

Idiomatic Rust guide based on Apollo GraphQL's best practices handbook.

API attack hunting (REST / GraphQL / gRPC) - BOLA/IDOR, BFLA, mass assignment, excessive data exposure, auth/JWT, introspection + batching, rate-limit abuse.

GraphQL IDOR/auth-bypass, XXE file-read/SSRF (SVG/DOCX/SAML), SSTI detection and RCE.

Execute raw GraphQL queries and mutations against the Linear API.

Interact with Linear project management - query issues, update status, create tickets, and manage workflows using the Linear GraphQL API.

Manage Linear issues, projects, and cycles via the Linear GraphQL API

Conducts security testing of REST, GraphQL, and gRPC APIs to identify vulnerabilities in authentication, authorization, rate limiting, input validation, and…

Create or extend a Bruno API collection across protocols: HTTP/REST (JSON, multipart, XML, SSE), GraphQL, gRPC (proto imports, streaming), WebSocket, and…

Reads GitHub via the gh CLI — repo metadata / README / file tree, issues with comments and timeline, pull requests (diff, files, inline comments, GraphQL…

API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.

构建、修改或审查 REST API、GraphQL 端点、webhook、中间件、请求/响应处理、API 版本管理、限流或分页时使用。

Use when designing REST or GraphQL APIs, creating OpenAPI specifications, or planning API architecture.

Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.

Design, implement, debug, and optimize API integrations with expert-level patterns for REST, GraphQL, webhooks, and authentication flows.