jxscout-skills

Creates jxscout findings via CLI (kind, severity, description, dedup_key, metadata). Use when recording a security finding, saving a vulnerability or issue to the project, or when the user asks to create a finding.

Tests HTTP requests for IDOR (Insecure Direct Object Reference) by identifying sensitive parameters and applying substitution, duplicate-parameter, array, and path-traversal techniques. Use when testing for IDORs, unauthorized access, or when the user asks to research IDORs on a request.

Sends raw HTTP from .req files via jxscout repeater and inspects responses for security research. Use when testing HTTP requests, modifying request files to achieve a security goal, or when the user mentions repeater, .req/.res, or raw HTTP testing.