{"slug":"elementalsouls-hunt-fintech-graphql","source_name":"elementalsouls/hunt-fintech-graphql","name":"Elementalsouls/Hunt Fintech GraphQL","description":"Hunt fintech-specific GraphQL vulnerabilities: money-movement mutations (transfers, redemptions, withdrawals, card top-ups), ledger/balance/portfolio query IDOR, decimal-precision and rounding abuse, idempotency-key bypass enabling double-spend, KYC/PII field-level authorization gaps, and admin-override mutations reachable via mass assignment. Distinct from hunt-graphql, which owns generic GraphQL discovery and IDOR/mutation methodology — this skill owns the delta introduced when a GraphQL layer","version":1,"lift":{"pass_rate_delta_pts":28,"pass_rate_pct":76,"total_cases":25,"passed_cases":19,"tokens_delta_pct":88.7,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-09-08T04:48:40.469968+00:00"},"skill_score":0.7600000000000001,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":28,"with_pass_pct":76,"without_pass_pct":48,"tokens_delta_pct":88.7,"turns_delta_pct":0,"total_cases":25,"cases_aggregated":25,"verdict":"mixed","never_hurt":false,"completed_at":"2026-09-08T04:48:40.469968+00:00","run_id":"0b755d48-2ec4-40a6-9a61-79395d839b86","latest_attempt":{"id":"0b755d48-2ec4-40a6-9a61-79395d839b86","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-09-08T04:48:40.469968+00:00","gate":null},"version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":1,"total_uses":34,"total_users":1,"manifest_hash":"77ac45149b0f5b16cd47e321558405da8190fac0821e39330affb45623838a5f","install_name":"elementalsouls-hunt-fintech-graphql","version_id":"96744506-2866-4cb3-8a90-6ed971d9cdc3","body_sha256":"77ac45149b0f5b16cd47e321558405da8190fac0821e39330affb45623838a5f","render_hash":"35042b6f494921128ee3ac2944dff70566cdd2d737dd14b78bea586e847e9bb6","raw_url":"https://app.decimal.ai/s/elementalsouls-hunt-fintech-graphql/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-hunt-fintech-graphql"}