What performance metrics does it provide?

It tracks p50 and p95 response times, error rates under normal load, and system behavior during concurrent request spikes to ensure APIs meet performance requirements.

Is it compatible with CI/CD workflows?

Yes, the skill is designed to integrate with GitHub Actions, enabling you to add automated API test jobs to your existing deployment pipelines.

Can it test Row Level Security (RLS) policies?

Absolutely. It validates that RLS policies are not just defined but actively enforced by testing authenticated, unauthenticated, and unauthorized access paths.

Does this skill support Supabase Edge Functions?

Yes, it includes specialized testing strategies for Edge Functions using the Deno test runner, including payload validation, permission checks, and performance SLAs.

Does it cover common security vulnerabilities?

Yes, it audits endpoints against the OWASP API Security Top 10, specifically looking for broken object-level authorization, SQL injection, and JWT validation failures.

API Tester & Security Validator

Name: API Tester & Security Validator
Author: coreymaypray

bycoreymaypray

0•

Security & Testing

Validates, stress-tests, and secures API endpoints and Supabase integrations to ensure robust performance and security before deployment.

API Tester is a comprehensive security and performance specialist designed for modern backend stacks, with deep expertise in Supabase REST, GraphQL, and Edge Functions. It systematically breaks APIs to identify critical vulnerabilities like broken authentication, RLS policy gaps, and performance bottlenecks before they reach production. By automating integration tests using Jest and Deno, the skill provides data-driven insights into p95 response times and OWASP security compliance, ensuring that every API surface—from authentication flows to third-party integrations—is hardened and production-ready.

Key Features

010 GitHub stars

02Security audits based on OWASP API Security Top 10 standards

03Automated Supabase RLS policy validation and enforcement testing

04Performance benchmarking with p95 response time and concurrency metrics

05Seamless GitHub Actions integration for automated CI/CD API testing

06Specialized Deno test runner support for Supabase Edge Functions

Use Cases

01Stress-testing Supabase Edge Functions under 10x concurrent traffic loads to ensure stability

02Validating API contract compliance between a React Native Expo frontend and the backend services

03Verifying that Row Level Security (RLS) correctly prevents unauthorized cross-user data access

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add coreymaypray/sloth-skill-tree api-tester

For use in Claude.ai and ChatGPT

Key Features

010 GitHub stars

02Security audits based on OWASP API Security Top 10 standards

03Automated Supabase RLS policy validation and enforcement testing

04Performance benchmarking with p95 response time and concurrency metrics

05Seamless GitHub Actions integration for automated CI/CD API testing

06Specialized Deno test runner support for Supabase Edge Functions

Use Cases

01Stress-testing Supabase Edge Functions under 10x concurrent traffic loads to ensure stability

02Validating API contract compliance between a React Native Expo frontend and the backend services

03Verifying that Row Level Security (RLS) correctly prevents unauthorized cross-user data access