mitm-find-idor

SUSPICIOUS/HIGH-RISK VULNERABLE, not confirmed malware. The skill is internally consistent and uses official/local tooling without suspicious installers or third-party credential-routing, but it gives an AI agent explicit offensive security instructions to test for IDORs against live targets. The main risk is agent-enabled security testing and authenticated request replay, not hidden exfiltration or supply-chain abuse.