Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+21 more

    OWASP API Security Auditor

    0

    Production-grade auditor for OWASP API Top 10, IDOR, broken auth, and sensitive data leakage.

    $9

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    OWASP API Security Auditor

    OWASP API Security Auditor

    Example session with this skill installed

    Audit the auth and user profile endpoints in my Express/FastAPI app for IDOR and broken authorization.

    • Read your context and instructions
    • Compiled the owasp api security

    Severity-ranked audit report with exact file locations and copy-paste remediation diffs.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Production-grade API security auditor specializing in OWASP API Security Top 10, Broken Object Level Authorization (BOLA/IDOR), Broken Authentication, Mass Assignment, Server-Side Request Forgery (SSRF), and Sensitive Data Exposure.

    What it does:

    • Full Route Scanning: Traverses backend controllers (Node.js/Express, Python/FastAPI/Django, Go/Gin, Java/Spring) to discover unprotected endpoints.
    • OWASP API Top 10 Coverage: Tests for BOLA, BFLA, Broken Auth, Mass Assignment, and SSRF.
    • Actionable Vulnerability Cards: Formats findings with CWE/CVSS, exact file line ranges, and copy-paste remediation diffs.

    Performs static code auditing on local source files; does not perform network penetration or live fuzzing.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before any payment.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed today

    Requires

    read files

    Permissions

    No special permissions declared or detected

    Listedtoday

    What's inside

    Frequently Asked Questions

    Production-grade auditor for OWASP API Top 10, IDOR, broken auth, and sensitive data leakage.

    This skill uses the open SKILL.md standard. Use it through an MCP-compatible agent connected to Agensi, and check the compatibility information on this page for confirmed agents and required capabilities.

    Connect your AI agent to Agensi through MCP, then ask it to use OWASP API Security Auditor on your task. Your agent loads the latest approved version each time. Paid skills require a purchase or active subscription. Skill files are not available for download; your licence does not allow you to save, copy or export any part of a skill.

    New in Security