directus-security

Keyless active-probe security auditor for Directus CMS. Proves public-role data exposure, user enumeration, unauthenticated version/schema leaks, GraphQL introspection, and search-param field enumeration via live anonymous probes. Zero dependencies.