hunt-idor

SUSPICIOUS. The skill is internally coherent as an IDOR hunting playbook, but it grants an AI agent offensive security capabilities against arbitrary external targets, including enumeration, introspection, and potentially destructive testing. There is little supply-chain or credential-harvesting evidence; the main risk is misuse and real-world exploitation capability.