idor-broken-object-authorization
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical methodology for security researchers to identify authorization flaws in web applications and APIs.
- [SAFE]: No malicious code, prompt injection markers, or obfuscation techniques were detected within the skill instructions.
- [SAFE]: The inclusion of ORM filter injection techniques for Django, Prisma, and Ransack is consistent with the skill's stated purpose as a security testing playbook and provides relevant educational content for auditing these frameworks.
- [SAFE]: The skill does not include any automated execution scripts, remote dependencies, or persistence mechanisms.
Audit Metadata