Security audit
Security checks across malware telemetry and agentic risk
The skill is a coherent API testing helper, but it can generate or run mutating, load, and security tests against user-supplied APIs without strong upfront safeguards.
Install only if you intend to use it on APIs you own or are authorized to test. Before allowing an agent to run generated tests, confirm the target environment, avoid production for load/security/destructive tests, replace sample credentials with test-only secrets, and review any generated POST/PUT/DELETE or imported Postman/cURL workflows.
def get_token(self):
"""获取认证 Token"""
response = requests.post(f"{self.base_url}/auth/login", json={
"username": "testuser",
"password": "Test1234"
})| Swagger/OpenAPI 文档 | JSON/YAML 格式 | 解析接口定义，生成测试用例 | | 接口文档 | Markdown/HTML | 提取接口信息，构建测试 | | 接口地址 | URL + 方法 | 直接发起请求测试 | | cURL 命令 | shell 命令 | 解析并转换为测试脚本 | | Postman Collection | JSON 导出 | 导入并执行测试 | ### 2. 接口测试框架
64/64 vendors flagged this skill as clean.
No suspicious patterns detected.