openapi-security-test

Plugin openapi-security-test from marketplace mfakbar127-skills in mfakbar127/agent-skills. Commands read from the repo's manifest — 25 days ago.

Skills (10)

• openapi-api-dependency

  Map auth flows and endpoint dependency chains from an OpenAPI spec. Writes openapi-dependencies.md with the correct call sequence and credential requirements for each endpoint. Step 2 in the openapi-security-test pipeline.

• openapi-finding-reporting

  Generate a structured finding report from security test output. Reads Cucumber.js JSON (reports/cucumber-report.json) or Hurl findings and writes finding-report.md with OWASP categories, severity, evidence, and remediation. Step 6 in the openapi-security-test pipeline.

• openapi-owasp-gherkin

  Generate Gherkin BDD .feature files for all 10 OWASP API Security Top 10 2023 categories. Spawns one subagent per category in parallel and writes to security_test_cases/. Step 4a in the openapi-security-test pipeline.

• openapi-owasp-hurl

  Generate Hurl plain-HTTP test files for all 10 OWASP API Security Top 10 2023 categories. Each .hurl file uses [Captures] for token chaining and [Asserts] for security assertions. Spawns one subagent per category in parallel and writes to security_test_cases/. Step 4b in the openapi-security-test pi

• openapi-parse

  Parse an OpenAPI/Swagger spec and write a structured summary to openapi-summary.md. Step 1 in the openapi-security-test pipeline.

• openapi-runner-hurl

  Run the .hurl files in security_test_cases/ against a live API, interpret results, and print a findings table. Step 5b in the openapi-security-test pipeline.

• openapi-security-test

  End-to-end orchestrator: OpenAPI spec → OWASP API Top 10 test suite → finding report. Supports Gherkin (Cucumber.js) and Hurl formats. Runs the full pipeline in one command.

• openapi-test-context

  Collect tech stack info and runtime test data from the user, auto-extract payload fields, and generate stack-aware boundary values. Writes openapi-test-context.md for use by openapi-owasp-gherkin and openapi-owasp-hurl. Step 3 in the openapi-security-test pipeline.

• openapi-test-runner

  Scaffold Cucumber.js step definitions and project files to run the .feature files produced by openapi-owasp-gherkin. Step 5a in the openapi-security-test pipeline.

• openapi-test-suite-generate

  Generate a test-suite.json for run_tests.py from openapi-summary.md and openapi-dependencies.md. Python-only alternative to the Hurl/Gherkin path. Produces a JSON test suite that covers register → login → all protected endpoints in dependency order.

Similar plugins