idor-testing

The skill is framed for authorized assessments and includes a meaningful confirmation gate, but it also gives detailed exploitation techniques and recommends rate-limit evasion and other bypass attempts. No installer, credential harvesting, or external data-routing behavior is present. Classify as high security risk due to offensive security capabilities and inconsistent operational boundaries, not confirmed malware.