idor-testing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill's examples and workflow show including session cookies (e.g., "Cookie: session=abc123"/"session=attacker_session") and instruct capturing/modifying authenticated requests, which implies the agent would need to insert secret session tokens verbatim into requests — an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable offensive techniques for discovering and exploiting IDORs (enumeration, request manipulation, automated brute-forcing, proxy/IP rotation, verification steps that target victim accounts) and can be used to access or exfiltrate other users' data.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow in SKILL.md is an IDOR testing methodology that instructs the user to use an intercepting proxy (Burp Suite) to modify and resend outsider-supplied target URLs/requests to probe other users’ data, thereby ingesting free-text target/app responses at runtime.