Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have access to by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the data model without filtering. Part of OWASP API3:2
Scanned 9/10/2026
Install to Claude Code
Skills Directorynpx -y skills add nexuslinkproductions/yuri-os --skill cyber-testing-api-for-mass-assignment-vulnerability --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Cyber Testing Api For Mass Assignment Vulnerability?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/nexuslinkproductions-cyber-testing-api-for-mass-assignment-vulnerabilit)More formats (shields.io, HTML) on the badges page.
---
name: cyber-testing-api-for-mass-assignment-vulnerability
description: "Tests APIs for mass assignment (auto-binding) vulnerabilities where clients can modify object properties they should not have access to by including additional parameters in API requests. The tester identifies writable endpoints, adds undocumented fields to request bodies (role, isAdmin, price, balance), and checks if the server binds these to the data model without filtering. Part of OWASP API3:2"
hide: true
---
<!-- GENERATED:YURI-CODEX-SKILL-ADAPTER:v1 -->
# YURI skill adapter
Authoritative source: `.claude/skills/cyber-testing-api-for-mass-assignment-vulnerability/SKILL.md`
Authoritative source SHA-256: `d83b602b3fe7c4e2db563271b5656ddf63f0456e32a404da50e1969be4155f5c`
Source class: `cyber-armed`
Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run `node _SYSTEM/Scripts/skill-recall.mjs --show cyber-testing-api-for-mass-assignment-vulnerability` and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
