mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-03-31 16:20:28 +02:00
51 lines
1.2 KiB
YAML
51 lines
1.2 KiB
YAML
name: "api-schema-analyzer"
|
||
command: "spectral"
|
||
enabled: true
|
||
|
||
short_description: "API模式分析工具，识别潜在安全问题"
|
||
|
||
description: |
|
||
分析API模式（OpenAPI/Swagger/GraphQL）并识别潜在安全问题。
|
||
|
||
**主要功能：**
|
||
- API模式分析
|
||
- 安全问题识别
|
||
- 端点发现
|
||
- 建议生成
|
||
|
||
**使用场景：**
|
||
- API安全审计
|
||
- 模式分析
|
||
- 安全问题发现
|
||
- 安全评估
|
||
|
||
parameters:
|
||
- name: "schema_url"
|
||
type: "string"
|
||
description: "API模式URL（OpenAPI/Swagger/GraphQL）"
|
||
required: true
|
||
flag: "-s"
|
||
format: "flag"
|
||
|
||
- name: "schema_type"
|
||
type: "string"
|
||
description: "模式类型（openapi, swagger, graphql）"
|
||
required: false
|
||
default: "openapi"
|
||
flag: "--type"
|
||
format: "flag"
|
||
|
||
- name: "additional_args"
|
||
type: "string"
|
||
description: |
|
||
额外的api-schema-analyzer参数。用于传递未在参数列表中定义的api-schema-analyzer选项。
|
||
|
||
**示例值：**
|
||
- 根据工具特性添加常用参数示例
|
||
|
||
**注意事项：**
|
||
- 多个参数用空格分隔
|
||
- 确保参数格式正确，避免命令注入
|
||
- 此参数会直接追加到命令末尾
|
||
required: false
|
||
format: "positional" |