cyber-testing-api-for-broken-object-level-authorization

name	cyber-testing-api-for-broken-object-level-authorization
description	Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to determ
hide	true

YURI skill adapter

Authoritative source: .claude/skills/cyber-testing-api-for-broken-object-level-authorization/SKILL.md

Authoritative source SHA-256: b58733efc887d5ce8a8173c5db72638fb2fa6c2395bbf6cf2ef23fd3a09f0a82

Source class: cyber-armed

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run node _SYSTEM/Scripts/skill-recall.mjs --show cyber-testing-api-for-broken-object-level-authorization and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.