MCP App StoreMCP App Store
from mukul975-anthropic-cybersecurity-skills-cybersecurity-skills12
Comprehensive guide for testing REST and GraphQL APIs for Broken Object Level Authorization (BOLA) and IDOR vulnerabilities.
This skill provides a rigorous methodology for identifying Broken Object Level Authorization (BOLA) vulnerabilities, also known as Insecure Direct Object References (IDOR). It enables an agent to systematically test if authenticated users can access or modify resources belonging to other users by manipulating object identifiers in API requests.
Activate this skill when performing security audits on REST or GraphQL APIs, assessing multi-tenant SaaS applications, or validating authorization middleware after new endpoint deployment. It is specifically designed for OWASP API Security Top 10 (API1:2023) assessments.
Designed for AI agents with shell access and the ability to execute Python scripts, specifically those integrated with security toolsets like Burp Suite or OWASP ZAP.
This skill has not been reviewed by our automated audit pipeline yet.
GraphQL Inspector — Validate
Validate GraphQL operations against a schema with configurable depth, complexity, alias and directive limits to catch errors before runtime.
arxiv2md
Convert arXiv papers into clean, LLM-ready Markdown via a REST API or CLI for fast reading, summarization, and downstream processing.
LAP CLI
CLI for compiling, searching, and managing API specifications into a compact agent-native format and generating/installing skills from specs.
Anthropic Security Basics
Practical security practices for Anthropic Claude integrations: API key management, input validation, prompt-injection defenses, and output scanning.
UXC — Unified eXecution CLI
Discover, inspect, and invoke schema-exposed remote interfaces (OpenAPI, GraphQL, gRPC, MCP, JSON-RPC) via a single CLI contract with deterministic JSON envelop
API and Interface Design
Guides design of stable, predictable APIs and interfaces — contract-first patterns, error semantics, pagination, and naming conventions for robust integrations.
Security Research Meta-Methodology
A structured vulnerability research framework distilled from 5600+ security docs, covering web injection, deserialization, binary exploitation, domain pentest,
Marmot Data Catalog
Search and manage data assets, view lineage and glossary terms, and inspect pipeline runs via the Marmot CLI, REST API, or MCP server.