bola skills

xalgorix/xalgorix

Skill Claude CodeCodex

Detect and prevent API enumeration attacks including BOLA and IDOR exploitation by monitoring sequential identifier access patterns and authorization failures.

zyx77550/sparda

Skill Claude CodeCodex

Drive a SPARDA compiled Behavior Runtime to its full potential. Use this whenever you are connected to a backend running the SPARDA Runtime (compiled into a Unified Behavior Graph - UBG) — recognizable by the tools spardagetcontext, spardainfo, spardaconfirm, or composite tools. It teaches the graph-context-first…

zyx77550/sparda

Skill Claude CodeCodex

Drive a SPARDA compiled Behavior Runtime to its full potential. Use this whenever you are connected to a backend running the SPARDA Runtime (compiled into a Unified Behavior Graph - UBG) — recognizable by the tools spardagetcontext, spardainfo, spardaconfirm, or composite tools. It teaches the graph-context-first…

akashrpatil/awesome-offensive-security-skills

Skill Claude CodeCodex

Identify and exploit Insecure Direct Object Reference (IDOR), or Broken Object Level Authorization (BOLA), vulnerabilities. Manipulate internal identifiers (e.g., user IDs, database primary keys, transaction IDs) within HTTP request parameters or API payloads to unauthorizedly access, modify, or delete data belonging…

raccioly/websec-validator

Skill Claude CodeCodex

Defensive security self-assessment of the operator's OWN Python or Node codebase. Local and read-only by default — it reads the repo, runs static scanners, and writes a briefing; no live system is touched. Active probes are opt-in, run only against a TEST instance the human owns and supplies, and require explicit…