SKILL: GraphQL and Hidden Parameters — Introspection, Batching, and Undocumented Fields AI LOAD INSTRUCTION : Use this skill when GraphQL exists or when REST documentation suggests optional, deprecated, or undocumented fields. Focus on schema discovery, hidden parameter abuse, and batching as a force multiplier. 1. GRAPHQL FIRST PASS If introspection is restricted, continue with: - field suggestions and error-based discovery - known type probes like - JS and mobile bundle route extraction 2. HIGH-VALUE GRAPHQL TESTS | Theme | Example | |---|---| | IDOR | | | batching | array of login or objec…