Cyber Testing Api For Broken Object Level Authorization

---
name: cyber-testing-api-for-broken-object-level-authorization
description: "Tests REST and GraphQL APIs for Broken Object Level Authorization (BOLA/IDOR) vulnerabilities where an authenticated user can access or modify resources belonging to other users by manipulating object identifiers in API requests. The tester intercepts API calls, identifies object ID parameters (numeric IDs, UUIDs, slugs), and systematically replaces them with IDs belonging to other users to determ"
hide: true
---

<!-- GENERATED:YURI-CODEX-SKILL-ADAPTER:v1 -->

# YURI skill adapter

Authoritative source: `.claude/skills/cyber-testing-api-for-broken-object-level-authorization/SKILL.md`

Authoritative source SHA-256: `b58733efc887d5ce8a8173c5db72638fb2fa6c2395bbf6cf2ef23fd3a09f0a82`

Source class: `cyber-armed`

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run `node _SYSTEM/Scripts/skill-recall.mjs --show cyber-testing-api-for-broken-object-level-authorization` and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.