idor-hunting

This skill is internally consistent with its stated purpose, but that purpose is offensive vulnerability hunting. It is not deceptive or clearly malicious, and its install/data-flow footprint is mostly coherent, yet it equips an AI agent to perform live authorization attacks and forwards session credentials to testing tools. Overall classification: SUSPICIOUS due to high offensive-security and credential-handling risk, not confirmed malware.