idor-broken-object-authorization

SUSPICIOUS/HIGH-RISK skill. Its footprint is coherent with its stated purpose, but the purpose itself is to equip an AI agent with offensive security testing techniques against authorization controls. There is no clear malware, credential theft, or suspicious installer behavior, yet the skill materially increases the agent's ability to probe and exploit live targets.