hunt-idor

Fail

Audited by Snyk on Aug 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The document provides detailed, actionable instructions and tooling to discover and exploit IDOR vulnerabilities, including steps to access other users' data, replay victim IDs with attacker credentials, enumerate IDs, and perform account takeover chains, which facilitates unauthorized data exfiltration and compromise.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 27, 2026, 05:31 AM
Issues
1
Security Audit — snyk — hunt-idor