sast-idor

SUSPICIOUS. The skill is internally coherent and does not show credential theft, exfiltration, or supply-chain abuse, but it gives an AI agent offensive security scanning capability to find authorization vulnerabilities. That makes it high-sensitivity even though the footprint stays local and proportionate to the stated purpose.