api-security-testing

Name: api-security-testing
Author: HermeticOrmus

HermeticOrmus ★ 4

A comprehensive API security assessment plugin that analyzes REST, GraphQL, gRPC, and WebSocket interfaces against the OWASP API Security Top 10, including authentication flow audits and authorization bypass detection through source-code-level analysis. It provides two specialized agents for full-spectrum API security testing and focused authentication review, plus a structured audit command with severity ratings and remediation guidance.

Security Code Review No API key detected prompt pack

Install

> /plugin marketplace add HermeticOrmus/LibreSecOps-Claude-Code/tree/HEAD/plugins/api-security-testing

> /plugin install api-security-testing

Source: https://github.com/HermeticOrmus/LibreSecOps-Claude-Code/tree/HEAD/plugins/api-security-testing

What it's made of

1 command · 2 agents · 1 skill

Commands: 1
Agents: 2
Skills: 1
MCP servers: 0
Hooks: 0

What it needs & plugs into

API keys: none
Paid services: none detected
External tools: none
Talks to: nothing external detected

Analyzed 2026-10-05. Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.

Is this your plugin?

Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (HermeticOrmus).