What this skill does
Assess REST and GraphQL API attack paths in scope.
Pentest API Attacker is part of the Developer Tools category — developer tools that help your agent write, review, debug, and ship code. You can install it on its own or alongside other developer tools skills from the OpenClaw catalog.
How to install Pentest API Attacker
The easiest path is via the OpenClaw Easy desktop app — one click, no terminal required:
- Download OpenClaw Easy for macOS or Windows (free, one-click installer, ~30 seconds).
- Open the in-app Skills panel.
- Search for
pentest-api-attackerand click Install. - The skill activates automatically when an incoming message matches its description.
Install from the command line
If you already run the OpenClaw CLI, add Pentest API Attacker with a single command:
openclaw skills add pentest-api-attacker
This pulls pentest-api-attacker from ClawHub and installs it into ~/.openclaw/skills/pentest-api-attacker/. Restart the OpenClaw gateway afterwards so the new skill is discovered.
How to use Pentest API Attacker
Once installed, Pentest API Attacker activates on its own: when an incoming message on WhatsApp, Telegram, Slack, Discord, Feishu or Line matches the skill's description, your OpenClaw agent loads it and runs the workflow. You can also trigger it explicitly by describing the task in chat. No extra configuration is required after install.
Manual install (advanced)
If you prefer manual installation:
- Click the Download .zip button above to grab
pentest-api-attacker-0.1.0.zipdirectly from our S3 mirror. - Unzip into
~/.openclaw/skills/pentest-api-attacker/(create the directory if it does not exist). - Restart OpenClaw Easy (or the OpenClaw CLI gateway) so the new skill is discovered.
Frequently asked questions
How do I install Pentest API Attacker?
Install Pentest API Attacker in the OpenClaw Easy desktop app by opening the Skills panel, searching for pentest-api-attacker, and clicking Install. From a terminal you can run: openclaw skills add pentest-api-attacker. Either way the skill is placed in ~/.openclaw/skills/pentest-api-attacker/.
Is Pentest API Attacker free?
Yes. Pentest API Attacker is free and open-source, distributed under the Apache-2.0 license through ClawHub. No account or payment is required to download or run it.
What does Pentest API Attacker do?
Assess REST and GraphQL API attack paths in scope.
Related: more developer tools skills
If Pentest API Attacker looks useful, you may also want to check out other developer tools skills in the OpenClaw catalog:
Browse the full OpenClaw skill catalog
This page covers just one skill. The OpenClaw skill hub has 10,000+ more — search, sort by downloads or stars, and install any of them in one click. There is also a curated awesome-openclaw-skills list grouped by use case.
Get OpenClaw Easy — Free
Install Pentest API Attacker and 10,000+ other OpenClaw skills in one click. Free, open-source, runs locally on macOS & Windows.
Free, open-source · Apache-2.0 · Works with Claude, ChatGPT, Gemini, or local Ollama models