Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.
数据来源：ClawHub。 在 ClawSkills 查看
选择你使用的 Agent
方法一：命令行安装（推荐）
推荐（无需提前安装 clawhub）
npx clawhub@latest --dir ~/.claude/skills install pentest-api-attacker或使用 clawhub CLI（需提前安装）
clawhub --dir ~/.claude/skills install pentest-api-attacker⚠️ 需要 Node.js 18+，没有 Node？请使用下方方法二直接下载 ZIP。 安装 Node.js →
方法二：手动下载安装（无需 Node）
下载 ZIP，解压后将文件夹放到以下路径，重启 Agent 即可：
安装路径
~/.claude/skills/pentest-api-attacker/💡解压后将文件夹放到上方路径，重启 Agent 即可生效
--- name: pentest-api-attacker description: Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks. ---
Enumerate and test API endpoints and business logic attack vectors.
python skills/pentest-api-attacker/scripts/api_attacker.py --scope scope.json --target <target> --input <path> --output <path> --format json --dry-runapi-endpoints.jsonapi-findings.jsonapi-attack-report.jsonreferences/tools.mdskills/autonomous-pentester/shared/scope_schema.jsonskills/autonomous-pentester/shared/finding_schema.jsonWARNING AUTHORIZED USE ONLY
This skill executes real security testing tools against live targets.
Use only with written authorization.
安装 Pentest Api Attacker 后，可以对 AI 说这些话来触发它
Help me get started with Pentest Api Attacker
Explains what Pentest Api Attacker does, walks through the setup, and runs a quick demo based on your current project
Use Pentest Api Attacker to test APIs against OWASP API Security Top 10 including discovery, au...
Invokes Pentest Api Attacker with the right parameters and returns the result directly in the conversation
What can I do with Pentest Api Attacker in my developer & devops workflow?
Lists the top use cases for Pentest Api Attacker, with example commands for each scenario
将技能文件夹放到 ~/.claude/skills/pentest-api-attacker/ 目录（个人级，所有项目可用），或 .claude/skills/pentest-api-attacker/（项目级）。重启 AI 客户端后，用 /pentest-api-attacker 主动调用，或让 AI 根据上下文自动发现并使用。
Pentest Api Attacker 支持 Claude、Cursor、OpenClaw，可与这些 AI 平台无缝集成，扩展其能力。
Pentest Api Attacker 可免费安装使用。请查阅仓库了解许可证信息。
Test APIs against OWASP API Security Top 10 including discovery, auth abuse, and protocol-specific checks.
Pentest Api Attacker 属于「Developer & DevOps」分类，该分类的技能帮助 AI 智能体在此领域执行专业任务。
Automate my developer & devops tasks using Pentest Api Attacker
Identifies repetitive steps in your workflow and sets up Pentest Api Attacker to handle them automatically