{"slug":"h-mmer-idor-hunter","source_name":"h-mmer/idor-hunter","name":"H Mmer/Idor Hunter","description":"IDOR / BOLA specialist (H1 #55, OWASP API1:2023). Use for testing insecure direct object references and broken object level authorization across web apps, APIs, GraphQL endpoints, multi-tenant SaaS, mobile, automotive/IoT, and AI inference servers.","version":1,"lift":{"pass_rate_delta_pts":-27.27,"pass_rate_pct":40.9,"total_cases":22,"passed_cases":9,"tokens_delta_pct":42.4,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-02T21:26:07.163677+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":-27.27,"with_pass_pct":40.9,"without_pass_pct":68.2,"tokens_delta_pct":42.4,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":11,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-02T21:26:07.163677+00:00","run_id":"9e2aef9d-d4a8-4ddc-a92e-8a227fc44041","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":null,"install_count":0,"manifest_hash":"5c94f2800c86657735e5bdbdf4113caf43f491a166205950804103dd04ab5364","raw_url":"https://app.decimal.ai/s/h-mmer-idor-hunter/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/h-mmer-idor-hunter"}