跳到主要内容
知仓学习社ZHICANG

API Testing

Comprehensive API testing for REST and GraphQL endpoints with contract validation

不碰外部(只输出文字)无严重或高危命中a5c-ai/babysitter

它会碰到什么

扫了多少2 个文本文件,3 KB
它会碰到什么不碰外部(只输出文字)
命中总数0 处
命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

API Testing Skill

Overview

This skill provides expert-level capabilities for API testing, covering REST, GraphQL, authentication flows, schema validation, and contract testing integration.

Capabilities

REST API Testing

  • Execute API tests with Supertest/REST Assured
  • HTTP method testing (GET, POST, PUT, PATCH, DELETE)
  • Header and cookie manipulation
  • File upload/download testing

GraphQL Testing

  • Query and mutation testing
  • Subscription testing
  • Schema introspection validation
  • Variable and fragment handling

Schema Validation

  • Validate OpenAPI/Swagger schemas
  • Response schema validation with Ajv/Joi
  • Generate test cases from API specifications
  • Contract validation

Authentication Testing

  • OAuth 2.0 flow testing
  • JWT token validation
  • API key authentication
  • Session-based authentication

Performance Assertions

  • Response time validation
  • Throughput measurements
  • Rate limiting verification

Contract Testing

  • Consumer contract generation
  • Provider verification
  • Pact integration

Target Processes

  • api-testing.js - API test implementation
  • contract-testing.js - Contract testing workflows
  • security-testing.js - API security testing
  • performance-testing.js - API performance validation

Dependencies

  • supertest - HTTP assertions (Node.js)
  • axios - HTTP client
  • ajv - JSON schema validation
  • graphql-request - GraphQL client

Usage Example

{
  kind: 'skill',
  skill: {
    name: 'api-testing',
    context: {
      action: 'execute-tests',
      baseUrl: 'https://api.example.com',
      specPath: 'openapi.yaml',
      authType: 'bearer',
      validateSchema: true
    }
  }
}

Configuration

The skill can auto-discover API specifications from OpenAPI/Swagger files and generate comprehensive test suites.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

它属于哪个仓库

星标★ 1,796
本站分层T1
该仓技能数2115
原文件路径library/specializations/qa-testing-automation/skills/api-testing/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 2115 个技能