hunt-idor
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides various command-line examples using standard security tools like
curl,ffuf, andgrep. These are intended to help an agent or researcher test API endpoints for authorization flaws, which is consistent with the skill's stated objective. - [DYNAMIC_EXECUTION]: The instructions include a simple Python script template that generates a list of sequential integers and writes them to a local file (
ids.txt). This is a benign utility for creating wordlists for fuzzing and does not involve untrusted input or remote code execution.
Audit Metadata