web-idor
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains markdown-based instructions for security professionals (pentesting and bug bounty modes) to identify Broken Access Control vulnerabilities. No malicious scripts, hidden commands, or executable code were found.
- [SAFE]: All referenced tools (Burp Suite, Autorize, Caido) are well-known, legitimate security industry software consistent with the skill's stated purpose.
- [SAFE]: The Sigma rule provided in the detection documentation is a standard defensive pattern for identifying horizontal enumeration and does not contain any malicious logic.
- [SAFE]: No obfuscation, prompt injection, or data exfiltration patterns were detected across the provided files.
Audit Metadata