api-mitmproxy

api-mitmproxy is an Application security skill for AI agents, published by AgentSecOps in the SecOpsAgentKit repository on GitHub. Skillspace rates api-mitmproxy F (15/100) and the safety scan rated it unsafe; the rating is based on static analysis only.

Interactive HTTPS proxy for API security testing with traffic interception, modification, and replay capabilities. Supports HTTP/1, HTTP/2, HTTP/3, WebSockets, and TLS-protected protocols. Includes Python scripting API for automation and multiple interfaces (console, web, CLI). Use when: (1) Intercepting and analyzing API traffic for security testing, (2) Modifying HTTP/HTTPS requests and responses to test API behavior, (3) Recording and replaying API traffic for testing, (4) Debugging mobile app or thick client API communications, (5) Automating API security tests with Python scripts, (6) Exporting traffic in HAR format for analysis.

Grade
F
Quality
15 / 100
Safety
Unsafe
GitHub stars
176

Unproven: rated by static analysis only, not yet compared head-to-head.

Our two independent classifiers differ on this skill's category, so treat the placement as provisional.

This rating describes the version of the repository we crawled; it may have changed since.

View source on GitHubAgentSecOps/SecOpsAgentKit

Our review

Architecture
84 / 100
Maturity
Structured: ships references or scripts
Security scan
Critical-risk patterns
License
Not declared. Check the repository before reusing it.
Adoption
Adopted by 0 other repositories, in 5 collections

What the scanner flagged

  • destructive rm -rf on home/root
  • accesses sensitive system files
  • mentions secrets in text

Not checked yet

  • Not judged on the rubric yet (not a contender in its category)
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Better-rated skills in Application security

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.