{"slug":"elementalsouls-hunt-ato","source_name":"elementalsouls/hunt-ato","name":"Elementalsouls/Hunt Ato","description":"Hunt account takeover taxonomy — 9 distinct paths to ATO, plus chains. Paths: (1) password reset flaws (host-header injection redirects token, predictable/numeric token, Referer leak, no-expiry/reuse), (2) email change without re-auth, (3) OAuth account-link CSRF, (4) MFA bypass (per hunt-mfa-bypass), (5) session fixation, (6) JWT manipulation (forge token to another identity; crypto details → hunt-jwt-crypto), (7) password change without step-up (chain with login timing/length oracle), (8) soci","version":1,"lift":{"pass_rate_delta_pts":8.7,"pass_rate_pct":82.6,"total_cases":23,"passed_cases":19,"tokens_delta_pct":166.1,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-09T13:00:27.981235+00:00"},"skill_score":0.8261,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":8.7,"with_pass_pct":82.6,"without_pass_pct":73.9,"tokens_delta_pct":166.1,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-09T13:00:27.981235+00:00","run_id":"8e62f088-e694-4c7a-9c4e-34b2974dac08","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"NOASSERTION","install_count":0,"manifest_hash":"1de57bda783bd34cfe71bf033a77dc2a206b328d1fccd1671def1d30d9ed74f0","raw_url":"https://app.decimal.ai/s/elementalsouls-hunt-ato/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-hunt-ato"}