The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses shell utilities such as cat and grep to process lists of application endpoints from files named endpoints-live.txt and idor-candidates.txt for analysis.
[EXTERNAL_DOWNLOADS]: Includes illustrative Python snippets that use the requests library to perform network operations against external targets (e.g., app.target.com) to verify authorization enforcement.
[PROMPT_INJECTION]: The skill defines a workflow that ingests external data from endpoints-live.txt and endpoints.txt without specific boundary markers or sanitization, creating a surface for indirect prompt injection if the ingested data contains malicious instructions. The skill utilizes shell execution and Python network capabilities to act on this data.

idor-hunting