Download

Skill UI

Browse and discover 6252+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Authorization , found 36 results

Default Newest Most Downloaded

Mass Assignment API Exploit

exploiting-mass-assignment-in-rest-apis

mukul975/Anthropic-Cybersecurity-Skills

Guide for discovering and exploiting mass assignment vulnerabilities in REST APIs, useful during API security assessments and bug bounty work to inject unexpected parameters, escalate privileges, and bypass authorization controls.

GCP Binary Authorization

implementing-gcp-binary-authorization

mukul975/Anthropic-Cybersecurity-Skills

Implements Google Cloud Binary Authorization so only attested container images reach GKE or Cloud Run; covers enabling APIs, creating KMS-backed attestors, importing policies, and integrating Cloud Build scans and attestations for compliance-aligned deploy-time security.

Laravel Security Best Practices

laravel-security

affaan-m/everything-claude-code

Comprehensive guide for hardening Laravel applications with auth/authorization, validation, CSRF, file handling, rate limiting, secrets, and deployment safeguards.

Postman API Security Tests

performing-api-security-testing-with-postman

mukul975/Anthropic-Cybersecurity-Skills

Leverages Postman collections, automated scripts, and Newman/ZAP integrations to exercise OWASP API Security Top 10 vulnerabilities across roles and CI/CD pipelines, ensuring authentication, authorization, injection, and data exposure defenses before deployment.

GraphQL Security Testing

performing-graphql-security-assessment

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through discovering GraphQL endpoints, extracting schemas, verifying authorization, and probing injection risks during authorized assessments of web, mobile, or microservice GraphQL APIs.

Web Application Pentest

performing-web-application-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Leverages OWASP WSTG processes and Burp Suite to systematically validate web applications for authentication, authorization, input validation, session, and business-logic flaws ahead of deployment or during compliance checks.

BOLA API Testing Guide

testing-api-for-broken-object-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Guides pentesters through detecting Broken Object Level Authorization in REST and GraphQL APIs by enumerating object IDs, intercepting requests, manipulating identifiers, and verifying per-object access controls during OWASP API1 assessments.

API Mass Assignment Tester

testing-api-for-mass-assignment-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

Automates mass-assignment checks by injecting privileged properties (role, balance, pricing, permissions) into writable JSON/XML API endpoints so security teams can verify OWASP API3 Broken Object Property Level Authorization defenses and spot auto-binding vulnerabilities.

OWASP API Security Testing

testing-api-security-with-owasp-top-10

mukul975/Anthropic-Cybersecurity-Skills

Guides offensive and defensive teams through systematic REST, GraphQL, and gRPC API testing against the OWASP API Security Top 10, covering discovery, authorization flaws, authentication gaps, data exposure, and rate limiting checks with common tooling.

Mobile API Auth Testing

testing-mobile-api-authentication

mukul975/Anthropic-Cybersecurity-Skills

Assess mobile backend APIs for authentication and authorization weaknesses, covering JWT/OAuth flaws, insecure token handling, session fixation, IDOR, and privilege escalation during penetration tests of mobile apps.

Red Team Planner

alirezarezvani/claude-skills

Organizes MITRE ATT&CK-informed red team engagements by scoring techniques on effort and detection risk, sequencing kill-chain phases, identifying choke points, and flagging OPSEC concerns before executing simulations with authorization.

Feishu Troubleshoot Assistant

feishu-troubleshoot

op7418/CodePilot

Feishu plugin troubleshooting tool combining FAQ guidance with the /feishu doctor command to inspect permissions, API connectivity, app credentials, and user authorizations, then generate diagnostic reports and remediation steps.

Language