API Testing

Purpose

Comprehensive API testing and security validation skill covering REST, GraphQL, and gRPC endpoints. Provides structured workflows for functional testing, contract testing, load testing, fuzzing, and OWASP API Top 10 security checks using Bruno, Hurl, k6, Postman, and httpie.

When to Invoke

Skill({ skill: 'api-testing' });

Invoke when:

• Validating a new or modified REST/GraphQL/gRPC API
• Running contract tests before a deployment
• Performing an OWASP API Top 10 security audit
• Setting up load or soak tests for an endpoint
• Fuzzing request parameters and headers for edge-case bugs