The Agent Skills Directory

[SAFE]: The skill is a documentation-only resource providing educational content on IDOR vulnerability research.
[COMMAND_EXECUTION]: The skill contains example command-line snippets using curl and ffuf. These are provided as templates for security researchers to use during manual testing (e.g., curl -H "Cookie: session=USER_B_SESSION" https://target.com/api/v1/invoices/12345). These are passive examples and do not execute automatically.
[DYNAMIC_EXECUTION]: A small Python script is included to demonstrate how to generate a wordlist of IDs (`range(known_id
500, known_id + 500)`). This is a benign utility script for security testing preparation.
[PROMPT_INJECTION]: No attempts to override agent behavior or safety guidelines were found. The instructional tone is standard for a technical guide.

hunt-idor