idor-hunter

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs testers to capture session tokens and to produce/send "exact HTTP request with attacker session + victim ID," which requires including session/authentication secrets verbatim in requests or PoCs, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill contains explicit, actionable instructions and automation to enumerate and exploit IDOR/BOLA (session token capture/use, brute-force ID enumeration, JWT tampering/alg:none, and scripted requests that extract victim data), which enable unauthorized data access and credential misuse.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests and uses outsider-authored free text when it has to “map every place the application exposes object references” by browsing/interacting with the target app’s inputs/responses (e.g., via Burp proxy browsing) that an outsider/user can influence, so the agent can be fed attacker-controlled strings and then act on them.