{"slug":"elementalsouls-hunt-business-logic","source_name":"elementalsouls/hunt-business-logic","name":"Elementalsouls/Hunt Business Logic","description":"Hunting skill for business logic vulnerabilities. Built from 12 public bug bounty reports. Covers coupon-race-stacking (Instacart, Stripe, Reverb), negative-quantity-in-cart price tampering (Upserve, Eternal/Zomato), decimal/fraction price-field overflow (Shipt), client-side checkout amount trust on PayPal redirect (WordPress.org), price-per-unit mass-assignment (Krisp), and archived-price swap / cart-TOCTOU (Stripe). Use when hunting business logic — heavy emphasis on financial-impact-demonstra","version":1,"lift":{"pass_rate_delta_pts":-100,"pass_rate_pct":81.8,"total_cases":22,"passed_cases":18,"tokens_delta_pct":179.4,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-09T13:20:48.961528+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":-100,"with_pass_pct":0,"without_pass_pct":100,"tokens_delta_pct":179.4,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-09T13:20:48.961528+00:00","run_id":"06aeac32-f4ab-4958-9998-ff5a4fb4919b","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"NOASSERTION","install_count":0,"manifest_hash":"084b04390ae9fbc283207bc4764d52b561f51f023dc2e0ebbca0b013277ac7a9","raw_url":"https://app.decimal.ai/s/elementalsouls-hunt-business-logic/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-hunt-business-logic"}