hunt-idor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill repeatedly demonstrates and instructs replaying session cookies and bearer tokens directly in curl/ffuf/Intruder commands (e.g., "Cookie: session=USER_A_SESSION", "Authorization: Bearer USER_B_TOKEN"), which requires embedding secret credentials verbatim into generated requests/commands and therefore poses an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document contains explicit, actionable instructions for unauthorized data access, exfiltration, privilege escalation, and account takeover—clearly enabling abusive/malicious behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly documents API-level actions that perform financial operations: it describes modifying voucher/payment policy to redirect charges and shows a POST /api/orders/{order_id}/refund flow that issues refunds ("Money moves from merchant to customer"). Those are concrete, transaction-producing API endpoints (state-changing money movement), which qualify as direct financial execution capabilities.