AI Agent Skills

Use when building a GraphQL feature end to end: domain, schema, TDD, security. Trigger words: GraphQL API, GraphQL schema, mutation, query, graphql-ruby.

Hunt fintech-specific GraphQL vulnerabilities: money-movement mutations (transfers, redemptions, withdrawals, card top-ups), ledger/balance/portfolio query IDOR, decimal…

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integr…

Hunting skill for csrf vulnerabilities. Built from 15 public bug bounty reports including modern variants — SameSite=Lax sibling-subdomain bypass (Argo CD CVE-2024-22424…

API security testing - GraphQL, REST API, WebSocket, and Web-LLM attack techniques.