api-overview
Modern API category — gRPC, SOAP/WSDL, WebSocket, Server-Sent Events. Routing skill: identify the API protocol from the response Content-Type or wire format, then load the matching sub-skill.
60
Quality
71%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Securityby
Critical
Do not install without reviewing
Fix and improve this skill with Tessl
tessl review fix ./packages/decepticon/decepticon/skills/standard/exploit/api/SKILL.mdModern API Attack Category
This is a routing skill. Identify the API protocol then load the matching sub-skill.
Sub-skills
| Protocol | Sub-skill | Wire signature |
|---|---|---|
| gRPC | grpc | HTTP/2 + `application/grpc[+proto |
| SOAP/WSDL | soap-wsdl | XML body in text/xml/application/soap+xml, ?wsdl discovery |
| WebSocket | websocket | HTTP Upgrade: websocket handshake, then framed binary/text |
| Server-Sent Events | server-sent-events | Content-Type: text/event-stream, one-way streaming |
Quick fingerprint
# gRPC?
curl -sk -I --http2 https://target/svc | grep -i 'application/grpc'
# SOAP?
curl -sk "https://target/endpoint?wsdl" | head -1 # XML WSDL doc
curl -sk -X POST -H 'Content-Type: text/xml' https://target/endpoint # 500 with SOAP fault
# WebSocket?
curl -sk -I -H "Connection: Upgrade" -H "Upgrade: websocket" https://target/ws | head -1
# 101 = WS upgrade
# SSE?
curl -sk -i https://target/stream -H "Accept: text/event-stream" | grep 'text/event-stream'Sibling skills
For REST + GraphQL go to:
load_skill("/skills/standard/exploit/web/SKILL.md")— sub-skillsgraphql,idor,mass-assignment, etc.
- Repository
- PurpleAILAB/Decepticon
- Commit
0cf691e
- Last updated
- First committed
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.