42crunch api security testing — Agent Skill
by 42Crunch-AI · Updated
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->reme…
At a glance
42crunch-api-security-testing is an Agent Skill by 42Crunch-AI in the Coding & Engineering category. In Claude Code it installs with `/plugin install 42crunch-api-security-testing@claude-plugins-official` after adding the anthropics/claude-plugins-official marketplace; other assistants use its SKILL.md instructions as rules. Its source repository has 1 GitHub stars (as of Oct 27, 2026).
How to install 42crunch api security testing in your AI client
Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.
How to install 42crunch api security testing in Claude CodeAnthropic's agentic CLI
Add the marketplace
claude/plugin marketplace add anthropics/claude-plugins-officialInstall the skill
claude/plugin install 42crunch-api-security-testing@claude-plugins-officialUse it
These are slash commands for a Claude Code session, not your shell. Claude auto-invokes the skill when your request matches its description — or type its slash command if it exposes one.
How to install 42crunch api security testing in Claude DesktopDesktop app (MCP config)
Clone the source
bashgit clone https://github.com/42Crunch-AI/claude-plugins.gitFind the skill
It lives in claude-plugins/plugins/api-security-testing — that folder contains the SKILL.md.
Add the SKILL.md to your Skills folder
Settings → Capabilities → Skills → add the folder containing SKILL.md. Claude picks it up automatically.
How to install 42crunch api security testing in CursorAI-first code editor
Clone the source
bashgit clone https://github.com/42Crunch-AI/claude-plugins.gitFind the skill
It lives in claude-plugins/plugins/api-security-testing — that folder contains the SKILL.md.
Convert to a Cursor rule
Create .cursor/rules/42crunch-api-security-testing.mdc and paste the SKILL.md body. Set `alwaysApply` or a glob so the Agent loads it in context.
How to install 42crunch api security testing in Codex CLIOpenAI coding agent
Clone the source
bashgit clone https://github.com/42Crunch-AI/claude-plugins.gitFind the skill
It lives in claude-plugins/plugins/api-security-testing — that folder contains the SKILL.md.
Reference in AGENTS.md
Add the skill's instructions (or a link) to AGENTS.md at your repo root — Codex reads it on every run.
How to install 42crunch api security testing in WindsurfCodeium's agentic IDE
Clone the source
bashgit clone https://github.com/42Crunch-AI/claude-plugins.gitFind the skill
It lives in claude-plugins/plugins/api-security-testing — that folder contains the SKILL.md.
Add to your rules / context
Paste the SKILL.md instructions into this tool's custom rules or workspace instructions so the agent follows them.
How to install 42crunch api security testing in ClineVS Code autonomous agent
Clone the source
bashgit clone https://github.com/42Crunch-AI/claude-plugins.gitFind the skill
It lives in claude-plugins/plugins/api-security-testing — that folder contains the SKILL.md.
Add to your rules / context
Paste the SKILL.md instructions into this tool's custom rules or workspace instructions so the agent follows them.
How to install 42crunch api security testing in VS CodeCopilot / MCP support
Clone the source
bashgit clone https://github.com/42Crunch-AI/claude-plugins.gitFind the skill
It lives in claude-plugins/plugins/api-security-testing — that folder contains the SKILL.md.
Add to your rules / context
Paste the SKILL.md instructions into this tool's custom rules or workspace instructions so the agent follows them.
Documentation
Full README42Crunch API Security Plugin
Automate API security directly in Claude Code with 42Crunch - audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes.
Overview
The 42crunch-api-security-testing plugin is designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
Commands
| Skill | Description | |---|---| | `/42crunch-setup` | Install the 42c-ast binary and configure credentials (one-time) | | `/42crunch-audit` | Static security audit of an OpenAPI Specification file with scored findings and AI-assisted fixes | | `/42crunch-scan` | Live conformance and authorization scan (BOLA/BFLA) against a running API | | `/42crunch-api-security-testing` | Full audit + scan pipeline in a single session | | `/generate-oas` | Generate a complete openapi.json from your API source code, a Postman/Insomnia collection, or both |
Prerequisites
- Claude Code (CLI, desktop app, or IDE extension)
- A 42Crunch account — Starter (Free Trial), a paid token-based plan (Individual or Individual Pro), or a Platform account with an API key (Team 10, Team 25, or Enterprise)
- For
42crunch-scan: a running API server reachable at the URL inservers[0]of your OAS (or viaSCAN42C_HOST)
The 42c-ast binary is downloaded and kept up to date automatically on first use.
Installation
Requirement: The Claude Code CLI is required to add marketplaces and install plugins using the commands below.
Add the 42Crunch marketplace:
claude plugin marketplace add https://github.com/42Crunch-AI/claude-pluginsInstall the 42crunch-api-security-testing plugin:
Excerpt — the full document is on GitHub.
More Coding & Engineering skills
- Coding & Engineering307k
superpowers
Superpowers teaches Claude brainstorming, subagent driven development with built in code review, systematic debugging, and red/green TDD. Additionally, it teaches Claude how to author and test new skills.
Claude Plugins (Official)by obra
- Coding & Engineering305k
mattpocock skills
Matt Pocock's agent skills for real engineering — grilling, spec/ticket flows, TDD, code review, domain modelling and more. Plug-and-play, not vibe coding.
Claude Plugins (Official)by mattpocock
- Coding & Engineering45k
asana
Asana project management integration. Connects Claude Code to Asana's V2 MCP server to create and manage tasks, search projects, update assignments, and track progress. Requires a one-time Asana OAuth app setup — run /asana-setup after installing.
Claude Plugins (Official)by anthropics
- Coding & Engineering45k
clangd lsp
C/C++ language server (clangd) for code intelligence
Claude Plugins (Official)by anthropics
- Coding & Engineering45k
code modernization
Guided modernization for any legacy codebase: start with /modernize, get an assessment, an interactive map, the business rules mined from the code, and a plan you approve, then an upgrade, a rewrite or a rebuild with independent proof that the new code behaves like the old. Includes security hardening, a one-page repo…
Claude Plugins (Official)by anthropics
- Coding & Engineering45k
code review
Automated code review for pull requests using multiple specialized agents with confidence-based scoring to filter false positives
Claude Plugins (Official)by anthropics
Catalog data refreshed . Something wrong? Report it.