fuzzing-apis

Quick Review

The skill addresses API fuzzing but lacks specificity. The description mentions discovering edge cases, crashes, and security vulnerabilities, but the implementation provides generic testing guidance rather than fuzzing-specific techniques (mutation strategies, payload generation, anomaly detection). Task knowledge is shallow—no concrete fuzzing tools, payload types, or vulnerability patterns are described. Structure is reasonable with clear sections, though some redundancy exists. Novelty is low: a CLI agent could invoke standard fuzzing tools (Burp Suite, ffuf, RESTler) directly with similar effort. The skill would benefit from fuzzing-specific knowledge like input mutation algorithms, stateful fuzzing strategies, crash triage workflows, and security-focused output analysis that differentiate it from generic API testing.