Borrowing it
Nothing to install: this file belongs to zhaji2333/CkSKILLS. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zhaji2333/CkSKILLS/main/.agents/skills/api-protocol-security/SKILL.mdgit clone --depth 1 https://github.com/zhaji2333/CkSKILLSWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zhaji2333/ckskills/api-protocol-security)<a href="https://agentmods.dev/skills/zhaji2333/ckskills/api-protocol-security"><img src="https://agentmods.dev/badge/skills/zhaji2333/ckskills/api-protocol-security/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/zhaji2333/ckskills/api-protocol-security"><img src="https://agentmods.dev/badge/skills/zhaji2333/ckskills/api-protocol-security.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00087 | $0.01203 |
| Opus 5.5 | $0.00035 | $0.00481 |
| Sonnet 5.5 | $0.00017 | $0.00241 |
| Haiku 4.5 | $0.00009 | $0.00120 |
Grade A, and why
api-protocol-security scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
api-protocol-security — API 与协议层安全专项深度挖掘
何时调用（触发条件）
- REST/GraphQL/gRPC/WebSocket 接口
- 接口文档暴露（Swagger/OpenAPI/api-docs）
- 调试端点（/actuator /debug /console /metrics）
- 旧版本接口（/api/v1 未下线）、内部接口外泄
- 路径已知的未授权 API / 网关（路径未知、无账号、独立 H5/迁域残留 → 先
unauth-path-key-hunt） - 微服务网关、反向代理
- HTTP 解析差异（走私）、缓存投毒
- 资源消耗类攻击（深层查询、巨型请求）
一、API/接口类场景表（全景）
| 场景 | 漏洞类型 | 挖掘要点 |
|---|---|---|
| REST API | 越权/注入/信息泄露 | 全方法测试(GET/POST/PUT/DELETE/PATCH) |
| GraphQL | 内省泄露/深度攻击/批量查询 | __schema查询、嵌套查询DoS、别名批量 |
| gRPC | 反序列化/未授权 | protobuf解析、接口鉴权 |
| WebSocket | 鉴权缺失/注入/越权 | 连接无token验证、消息可伪造 |
| 接口文档(Swagger/OpenAPI) | 敏感接口泄露 | /swagger-ui /api-docs暴露 |
| 调试接口 | 未授权访问/RCE | /actuator /debug /console |
| 旧版本接口 | 鉴权缺失/逻辑差异 | /api/v1旧版本未下线 |
| 内部接口外泄 | 未授权/敏感操作 | 内部RPC接口可公网访问 |
二、REST API 测试要点
- 每个接口测试全部 HTTP 方法（GET/POST/PUT/DELETE/PATCH/OPTIONS）
- 每个参数测试：正常值、空值、边界值、类型混淆、数组化、超长、特殊字符
- 鉴权测试：有 token/无 token/过期 token/其他用户 token
- 隐藏参数/调试参数全部尝试（debug=1、test=1、_method=PUT）
- BOLA（对象级授权）：遍历资源 ID、批量参数
- 速率限制：登录、验证码、短信、转账接口是否可绕过（IP/Header 伪造）
三、GraphQL 专项
- 内省查询：
{__schema{types{name}}}是否开放 - 深度攻击：嵌套查询（friends 循环）造成 DoS
- 别名批量：同一查询别名多次执行绕过速率限制
- 批量枚举：
user(id:1)遍历获取数据 - 越权：字段级权限缺失（隐藏字段可查）
四、WebSocket 专项
- 连接时是否验证 token（无鉴权直连）
- 消息伪造：他人会话/敏感操作
- 注入：SQL/命令注入点进入消息处理
- 越权：通过消息 ID 操作他人资源
五、HTTP 走私 / 协议层（O类）
- 反向代理解析差异（Content-Length vs Transfer-Encoding）
- 请求边界混淆 → 前置代理放行、后端走私
- 测试工具：
smuggler/ Burp 扩展 - 影响：缓存投毒、绕过鉴权、越权访问其他用户请求
六、资源消耗 DoS（P类）
- 正则灾难回溯（ReDoS）
- 巨型 JSON/XML 解析
- 图像炸弹（解压炸弹）
- 深度递归（GraphQL 嵌套）
- 无速率限制的批量接口
七、验证要点
- 全方法测试结果记录：每个方法的状态码/响应差异
- 未授权访问：直接调用管理接口/调试端点是否 200
- BOLA：A 用户 token 读取 B 用户数据即确认
- 走私：请求包能否污染下一个请求的响应
- 报告标注：接口文档暴露范围、可枚举数据量、速率限制缺失的影响
八、修复建议
- 统一网关鉴权，接口文档/调试端点仅内网开放
- 旧版本接口下线或同步鉴权
- GraphQL：关闭内省、深度/复杂度限制、别名限制
- WebSocket：连接鉴权 + 消息级权限校验
- 代理统一解析（规范 CL/TE）、禁止走私
- 速率限制：服务端按用户/IP，防 Header 伪造
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +1 lines 8c5e27fef9ad
- 1mo ago First seen · 87 lines · 87 tokens per session scan A ca36a1e08815
api-protocol-security is a skill published in the GitHub repository zhaji2333/CkSKILLS (126 stars, last pushed 1mo ago), licensed MIT. It adds 87 tokens to every session and 1,203 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
new
Create a new project to start development quickly.
channel-manager
Configure IM platform channels (Feishu, WeCom, Weixin, Discord, Telegram, DingTalk, QQ) for openclacky. Uses browser automation for navigation; guides the user to paste credentials and perform UI steps. Trigger on: "channel setup", "setup feishu", "setup wecom", "setup weixin", "setup wechat", "setup discord", "setup…
yida-data-management
A tool for querying, adding, and updating Yida form records, child tables, process records, and task-center data. It keeps ordinary forms and approval workflows on their separate data interfaces.
yida-canvas-data-binding
A method for connecting a YidaCodeCanvas page to real data from Yida forms, connectors, or same-site APIs. YidaCodeCanvas is the component used to run custom React pages inside Yida.
yida-connector-safe-actions
A method for turning existing API definitions into callable actions in an existing Yida HTTP connector. It reads frontend API wrappers and backend controller definitions to determine the request details.
yida-get-schema
A command for reading the field IDs, subtable paths, and behavior settings of a Yida form. Yida is a platform for building online forms and business workflows.