{"slug":"hunt-business-logic","source_name":"hunt-business-logic","name":"Hunt Business Logic","description":"Hunting skill for business-logic vulnerabilities (CWE-840 Business Logic Errors, CWE-841 Improper Enforcement of Behavioral Workflow, CWE-639 Authorization Bypass via User-Controlled Key in business contexts, CWE-362 race conditions on financial flows). Built from 44 corpus reports plus 8.8K shared-platform reports across HackerOne, Bugcrowd, Huntr, GitHub Security Advisories, plus 2024-2026 meta verified against NVD — Lilishop coupon overpurchasing (CVE-2024-50654 CVSS 7.5), WWBN AVideo wallet ","version":1,"lift":{"pass_rate_delta_pts":45.45,"pass_rate_pct":45.5,"total_cases":22,"passed_cases":10,"tokens_delta_pct":1139.9,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-26T14:34:37.932687+00:00"},"skill_score":0.4545,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":45.45,"with_pass_pct":45.5,"without_pass_pct":0,"tokens_delta_pct":1139.9,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-07-26T14:34:37.932687+00:00","run_id":"68b063ce-d873-43df-b64c-2076d55d0f08","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":null,"install_count":0,"manifest_hash":"78d40822ac78a7d8ecb4d546d0254b0b9839f51c98958c502ce6fe42db8ec59a","raw_url":"https://app.decimal.ai/s/hunt-business-logic/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/hunt-business-logic"}