GraphQL Security Testing
When Invoked
The user runs /vapt graphql <url> for deep GraphQL-specific security testing.
This is a specialized extension of vapt-api. While vapt-api covers basic GraphQL checks (introspection, depth, batching), this skill provides comprehensive GraphQL attack surface analysis.
Phase 1: GraphQL Discovery & Fingerprinting
1.1 Endpoint Detection
# Common GraphQL endpoint paths
for path in /graphql /graphiql /v1/graphql /v2/graphql /api/graphq
[Description truncada. Veja o README completo no GitHub.]