domains / families / security / sast-idor

sast-idor

authentic

Detect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a three-phase approach: recon (find candidates), batched verify (check authorization in parallel subagents, 3 candidates each), and merge (consolidate batch results). Checks endpoints for missing ownership or authorization checks on user-supplied identifiers. Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/idor-results.md. Use when asked to find IDOR or authorization bypass bugs.

When to use

• find IDOR bugs
• find authorization bypass bugs
• check endpoints for missing ownership checks
• check endpoints for missing authorization checks
• detect IDOR vulnerabilities

When not to use

• missing authentication
• broken function-level access control
• public resources
• parameter tampering on non-object fields
• SQL injection via ID fields

Skill page

Source