api-recon-and-docs

API reconnaissance and documentation review playbook. Use when discovering endpoints, schemas, versions, OpenAPI specs, hidden docs, and surface area for API testing.

Try your first task

Build a first-pass API surface inventory

Start a fresh conversation.

Use the api-recon-and-docs skill to perform a first-pass review of my authorized API target. From the supplied base URL, client JavaScript, and any OpenAPI or Swagger documents, produce a compact inventory of reachable entry points, versions, schemas, optional fields, role differences, GraphQL endpoints, mobile paths, and undocumented parameters. Identify the three highest-value areas for follow-up testing without attempting exploitation.

Required inputs

Authorized API base URL
Client JavaScript files or URLs, if available
OpenAPI, Swagger, or other API documentation, if available
In-scope hosts and testing boundaries

Suggested template by Skill Leaderboard, grounded in the linked source. Task evidence ↗

Inside SKILL.md

61 lines

Section content has not been verified for this skill yet.

Full source remains withheld under the current source-display policy. Read the author’s source ↗