From 50bbfb695eb25d4f2e80ce6b9c27a9e8ce162723 Mon Sep 17 00:00:00 2001
From: vsh00t <37148657+vsh00t@users.noreply.github.com>
Date: Sun, 3 May 2026 18:15:00 -0700
Subject: [PATCH] add empty-array IDOR FP and OAST source-IP SSRF FP signals
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Two single-bullet additions to the False Positives sections of two
existing skills:

- idor.md: empty array / null returned for another user's resource
  is silent enforcement (not exposure) — compare against the owner's
  view to confirm
- ssrf.md: OAST callback whose source IP matches the tester's machine
  was made client-side (browser / client fetch), not by the server

Both signals surfaced from the false-positive-indicators content
originally proposed in this PR; rest of the PR's scope (test scaffolding,
confidence module, system-prompt protocol, deprecated .jinja prompt
format) was dropped because the .jinja vulnerability prompt format has
been replaced by the .md skills and the other parts didn't have
production consumers.
---
 strix/skills/vulnerabilities/idor.md | 1 +
 strix/skills/vulnerabilities/ssrf.md | 1 +
 2 files changed, 2 insertions(+)

diff --git a/strix/skills/vulnerabilities/idor.md b/strix/skills/vulnerabilities/idor.md
index 03de2165..6c098b80 100644
--- a/strix/skills/vulnerabilities/idor.md
+++ b/strix/skills/vulnerabilities/idor.md
@@ -187,6 +187,7 @@ query IDOR {
 - Soft-privatized data where content is already public
 - Idempotent metadata lookups that do not reveal sensitive content
 - Correct row-level checks enforced across all channels
+- Empty array / null returned for another user's resource — silent enforcement, not exposure; compare against the owner's view to confirm the data is actually missing rather than just hidden from the response shape
 
 ## Impact
 
diff --git a/strix/skills/vulnerabilities/ssrf.md b/strix/skills/vulnerabilities/ssrf.md
index e3570d77..d1618b7f 100644
--- a/strix/skills/vulnerabilities/ssrf.md
+++ b/strix/skills/vulnerabilities/ssrf.md
@@ -157,6 +157,7 @@ Server-Side Request Forgery enables the server to reach networks and services th
 - Strict allowlists with DNS pinning and no redirect following
 - SSRF simulators/mocks returning canned responses without real egress
 - Blocked egress confirmed by uniform errors across all targets and protocols
+- OAST callbacks where the source IP matches the tester's machine, not the server — the browser or a client-side fetch made the request, not the backend
 
 ## Impact