{"slug":"lingxling-api-fuzzing-bug-bounty","source_name":"lingxling/api-fuzzing-bug-bounty","name":"Lingxling/API Fuzzing Bug Bounty","description":"Provide comprehensive techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing engagements. Covers vulnerability discovery, authentication bypass, IDOR exploitation, and API-specific attack vectors.","version":1,"lift":{"pass_rate_delta_pts":-20,"pass_rate_pct":73.9,"total_cases":23,"passed_cases":17,"tokens_delta_pct":82.6,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-28T07:07:35.335130+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":-20,"with_pass_pct":40,"without_pass_pct":60,"tokens_delta_pct":82.6,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-28T07:07:35.335130+00:00","run_id":"1eb6d0f0-13f5-4ff8-b58e-2b4f52065043","latest_attempt":{"id":"1eb6d0f0-13f5-4ff8-b58e-2b4f52065043","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-08-28T07:07:35.335130+00:00","gate":null},"version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"4363fb5b72d652844560b9d7ba1dfd5a2b8716b8dde39cc2f8d1fbd0b8d939b8","install_name":"lingxling-api-fuzzing-bug-bounty","version_id":"f331e9a1-ee47-409e-aa8c-2af2ab786600","body_sha256":"4363fb5b72d652844560b9d7ba1dfd5a2b8716b8dde39cc2f8d1fbd0b8d939b8","render_hash":"9fa20b91399d7b1574a2f8b2221fd6b8ca86e1eccf654ba5c2becd08f3116572","raw_url":"https://app.decimal.ai/s/lingxling-api-fuzzing-bug-bounty/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/lingxling-api-fuzzing-bug-bounty"}