ghost-validate

Malicious tool definition detected

Tool: SKILL.md Description: --- name: "ghost-validate" description: This skill should be used when the user asks to "validate a finding", "check if a vulnerability is real", "triage a security finding", "confirm a vulnerability", "determine if a finding is a true positive or false positive", or provides a security finding for review. It validates security vulnerability findings by tracing data flows, verifying exploit conditions, analyzing security controls, and optionally testing attack vectors

Malicious tool definition detected

Tool: VULNERABILITY_PATTERNS.md Description: # Vulnerability Class Reference ## Authorization Flaws (BFLA/BOLA/IDOR) Look for: - Missing ownership checks in database queries (e.g., no `UserId` in WHERE clause) - Inconsistent authorization between similar operations (e.g., destination checked but source not checked) - Direct object references without access control - Horizontal privilege escalation (accessing other users' resources) - Vertical privilege escalation (accessing admin functions)