aeondave/schemathesis
offensive-tools/fuzzing/schemathesis/SKILL.md
Auth/lab ref: OpenAPI/GraphQL property-based API fuzzer. Use to auto-generate API tests, catch schema violations, triage failures systematically, and run high-coverage stateful campaigns in REST/GraphQL services.
$ install --global
skillsauthnpx skillsauth add aeondave/malskill schemathesisInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 8, 2026, 3:53 AM199.6s1 file scanned
SKILL.md
- name:
- schemathesis
- description:
- Auth/lab ref: OpenAPI/GraphQL property-based API fuzzer. Use to auto-generate API tests, catch schema violations, triage failures systematically, and run high-coverage stateful campaigns in REST/GraphQL services.
- license:
- MIT
- compatibility:
- Python CLI/library; CI-friendly.
- author:
- GitHub Copilot
- version:
- 1.1
schemathesis
Schema-driven API fuzzing for developer and AppSec workflows.
Quick Start
# CLI
uvx schemathesis run https://example.schemathesis.io/openapi.json
# Installed CLI
schemathesis run https://your-api/openapi.json
import schemathesis
schema = schemathesis.openapi.from_url("https://your-api/openapi.json")
@schema.parametrize()
def test_api(case):
case.call_and_validate()
Operator Flow
- First run with defaults to map baseline failure landscape.
- Triage in this order: undocumented status codes -> schema conformance -> server errors.
- Narrow scope by tag/path to fix incrementally.
- Run longer optimization profile for release/security gates.
- Keep CI smoke + nightly deep profiles separated.
Strengths
- Generates large input space from API schema automatically.
- Detects 500s, contract/schema drift, validation bypasses.
- Supports stateful API workflows (operation sequences).
Optimization Profile (Deep Runs)
schemathesis run <schema_url> \
--max-examples 1000 \
--continue-on-failure
Often paired with targeted generation and health-check suppression on complex schemas.
Practical Tricks
- Use include-path/include-tag scope to eliminate triage noise.
- Keep one strict schema-conformance pass and one exploratory bug-hunting pass.
- Export machine-readable artifacts (JUnit/Allure) for team triage.
- Re-run minimal reproducer from failing example before opening defect ticket.
Common Pitfalls
- Trying to fix every first-run failure globally at once.
- Ignoring repetitive undocumented status patterns that should be schema-level fixes.
- Treating long-run health-check warnings as always ignorable.
CI Pattern
- Run fast smoke profile on PRs.
- Run longer stateful/negative campaigns nightly.
- Publish JUnit/Allure artifacts for triage.
Resources
- https://github.com/schemathesis/schemathesis
- https://schemathesis.readthedocs.io/
- https://schemathesis.readthedocs.io/en/stable/guides/triage/
- https://schemathesis.readthedocs.io/en/stable/guides/config-optimization/
Related Skills
aeondave/unicorn
development
VerifiedTrustedCommunity
Auth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.
11SKILL.mdUpdated Jul 24, 2026
aeondave/renode
development
VerifiedTrustedCommunity
Auth/lab ref: Renode board and SoC simulation for MCU/RTOS firmware, UART/GPIO/peripheral modeling, GDB remote debugging, REPL platforms, and RESC scripts.
11SKILL.mdUpdated Jul 24, 2026
aeondave/qiling
development
VerifiedTrustedCommunity
Auth/lab ref: Qiling OS-layer binary emulation for PE/ELF/Mach-O/UEFI/shellcode with rootfs, syscall/API hooks, filesystem mapping, and runtime patching.
11SKILL.mdUpdated Jul 24, 2026
aeondave/qemu
databases
VerifiedTrustedCommunity
Auth/lab ref: QEMU user-mode and full-system emulation for cross-arch binaries, firmware, kernels, disks, serial consoles, networking, and GDB stubs.
11SKILL.mdUpdated Jul 24, 2026