IDOR Vulnerability Testing
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze data from external targets, including API responses and URL parameters, which creates a potential surface for indirect prompt injection if the target application is malicious.\n
- Ingestion points: The agent captures and analyzes HTTP requests, response bodies, and specific parameters (e.g., user identifiers, resource IDs) from external web applications (SKILL.md).\n
- Boundary markers: The skill does not provide instructions for the agent to use delimiters or ignore embedded instructions within the data it retrieves from external targets.\n
- Capability inventory: The skill involves interacting with web endpoints, manipulating parameters, and performing automated enumeration of resources.\n
- Sanitization: There are no instructions for the agent to sanitize or validate the external content retrieved during the testing process.
Audit Metadata