Skip to content
TrustedSkillsbeta
Back to all skills

Api Fuzzing For Bug Bounty

Listed
sickn33·vlatest·backend·MIT

Provides API guidance and assistance for agent workflows.

Repository

Install on your platform

This skill no longer installs under the name api-fuzzing-for-bug-bounty. sickn33/agentic-awesome-skills has no skill named "api-fuzzing-for-bug-bounty" any more. It was renamed, moved or deleted upstream.

We check each listing against its upstream repository with the rules the skills CLI uses, last on 2026-11-02. We don't show a command we know will fail.

Repository install instructions

What we know about this skill

Publisher

sickn33

Taken from the source listing. We haven't verified who controls this account.

Install target

Live repository

Not pinned. Installing fetches whatever the repository holds at the time you run the command.

Nobody has reviewed this code. TrustedSkills indexes and links skills; it does not audit, run or scan them. A skill runs with whatever access you give your agent — read the source before you install it.

Automated safety checks

scanned

We could not read this skill's source, so none of the checks below were run.

Not scanned. none of the 7727 skills in the repository match this slug — it was most likely renamed or removed upstream after the registry indexed it Source recorded as sickn33/antigravity-awesome-skills.
This is a static scan, not a review. It reads the skill's files; it does not run them, and it cannot tell you whether the skill is any good or whether the code does what its description says. A skill runs with whatever access you give your agent.
What each check looks for →

About this skill

What it does

This skill automates the process of API fuzzing, which involves sending malformed or unexpected inputs to an API endpoint to identify potential vulnerabilities such as injection flaws, buffer overflows, and improper error handling. It systematically tests various parameters and payloads to uncover weaknesses that could be exploited in bug bounty programs.

When to use it

  • You are preparing for a bug bounty program and need to test APIs for security issues.
  • You suspect an API may have unhandled edge cases or input validation flaws.
  • You want to automate the initial reconnaissance phase of a penetration test against web services.

Key capabilities

  • Automated generation and sending of malformed payloads
  • Detection of common API vulnerabilities (e.g., SQLi, XSS)
  • Integration with bug bounty platforms for reporting findings

Example prompts

  • "Test the /user/login endpoint of example.com for potential injection flaws."
  • "Perform fuzzing on all endpoints in the api.example.org domain."
  • "Generate a report of vulnerabilities found during API fuzzing on targetapp.net."

Tips & gotchas

  • Ensure you have proper authorization before testing any API to avoid legal issues.
  • Some APIs may rate-limit or block suspicious traffic, so adjust request frequency accordingly.