idor-testing

SUSPICIOUS/HIGH-RISK SKILL: internally consistent and not malware-like, but it equips an AI agent with offensive IDOR discovery and exploitation procedures against web targets. The authorization gate and lack of installer/credential-forwarding behavior reduce maliciousness, yet the capability set remains high risk because it enables active exploitation and potential unauthorized data access.