Install any skill in seconds. Free to start, no credit card required.
Get Started Free →shadd0wtaka/idor-detector
IDOR Detector - Insecure Direct Object Reference Detection
Passed 18 of 22 test cases with the skill, and 9 of 22 without it.
and 9 more in the full report
9 fixed9 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
What is the exact MCP tool command name used to run scanning category agents in the framework?
| Checked | Without skill | With skill |
|---|---|---|
| Names zen-agents_agent_run as the MCP tool | Missed | Passed |
The instructions your model reads when the skill loads.
IDOR Detector - Insecure Direct Object Reference Detection
Category: scanning — Web Application Testing
IDOR Detector - Insecure Direct Object Reference Detection Phase 8.3: Business-Logic Testing - IDOR Detection
Dieses Modul implementiert IDOR-Vulnerability-Detection durch Testen von sequentiellen IDs und verschiedenen Benutzer-Sessions.
# Auto-registered in tool_registry under "scanning"
result = await tool_orchestrator.execute("idor_detector", target="example.com")
idor-detector --help
deep-recon --tool idor_detector --target example.comscanningzen-agents_agent_run agent_type=scanning tool=idor_detectorPOST /tools/execute with {"tool_name": "idor_detector", "target": "example.com"}test cases passed, vs 9 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.