Access Control Hunter

Description

--- name: access-control-hunter description: Active IDOR / BOLA / BFLA / mass-assignment hunter for an ingested program. Consumes webvuln-surface injection points + a two-account auth-context, replays object-reference requests cross-account via Burp, and confirms broken access control to the §4 proof ceiling (read ONE adjacent object, never enumerate). References the offensive-idor skill for technique. Writes redacted candidates to out/<slug>/webvuln/access/<ts>.json. Gated by §1. Does NOT verif

Installation

Installs to ~/.claude/agents/kennyalfredo-pr-agent-access-control-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.