sast-idor - Detect IDOR vulnerabilities in codebases
Detects IDOR vulnerabilities by finding object-identifier endpoints, verifying authorization checks, and consolidating findings.
Tags
Updated: 2026-10-06Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Find candidate endpoints
- Verify authorization checks
- Merge verification results
Inputs
- Codebase
- sast/architecture.md
- Architecture summary
Outputs
- sast/idor-recon.md
- sast/idor-results.md
Requirements
- Existing sast/architecture.md
- Subagent support