Summary
This is a focused template for API security testing during bug bounty hunts. It covers fuzzing REST, SOAP, and GraphQL endpoints with techniques for finding authentication bypasses, IDOR vulnerabilities, and API-specific attack vectors. You'll need Burp Suite, wordlists like SecLists, and basic Python scripting skills. Originally from sickn33's antigravity collection and now maintained by davila7, it passed Gen Agent Trust Hub's audit but got warnings from Socket and failed Snyk's checks. If you're actively hunting for API bugs and want a structured approach to enumeration and exploitation, this gives you a solid starting framework rather than building attack patterns from scratch.
Install to Claude Code
npx -y skills add davila7/claude-code-templates --skill "API Fuzzing for Bug Bounty" --agent claude-codeInstalls into .claude/skills of the current project.
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →Files
SKILL.md
Select a file.
Featured
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →
