{"slug":"elementalsouls-hunt-session","source_name":"elementalsouls/hunt-session","name":"Elementalsouls/Hunt Session","description":"Hunt Session Management vulnerabilities — session fixation (no regeneration on login), insufficient invalidation on logout / password-change / email-change, predictable or low-entropy session IDs, JWT-as-session with no exp/revocation, refresh-token rotation/reuse-detection gaps, OAuth/SSO session linkage, device-bound-session (DBSC) downgrade, and cookie attribute issues (Secure/HttpOnly/SameSite/__Host-). Validate with TWO real sessions (attacker A + victim B), body-diff every 200, and OOB con","version":1,"lift":{"pass_rate_delta_pts":24,"pass_rate_pct":84,"total_cases":25,"passed_cases":21,"tokens_delta_pct":241.8,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-09T13:58:23.507779+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":24,"with_pass_pct":84,"without_pass_pct":60,"tokens_delta_pct":241.8,"turns_delta_pct":0,"total_cases":25,"cases_aggregated":25,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-09T13:58:23.507779+00:00","run_id":"dcd135bb-6fef-4201-b4a9-5ca1b750a2f9","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"NOASSERTION","install_count":0,"manifest_hash":"9ffc349e797f30d466ba1556aaf13833a1741720edf2e178664855e176a7349c","raw_url":"https://app.decimal.ai/s/elementalsouls-hunt-session/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-hunt-session"}