idor-hunter

SUSPICIOUS: the skill is internally consistent as an IDOR/BOLA testing guide, but it is a high-risk offensive security skill for AI agents. It teaches active authorization bypass testing, cross-account token use, and potentially destructive state-changing actions against live targets, even though it shows no credential theft, malware payloads, or third-party exfiltration.