User object in GraphQL exposes number of trial reports for External Programs that also have a Private Program

For this vulnerability to work, it is necessary that you should be Admin/member of atleast one sandbox team and running a GraphQL node can tell you if the external programs exist on directory page running a private program on hackerone or not

{"query":"query Report_submission_page{\n  query {\n    id,\n    ...F0\n  }\n}\nfragment F0 on Query {\n  me {\n    username,\n    _remaining_reports3zrc4S:remaining_reports(team_handle:\"█████\")\n  },\n  id\n}","variables":{"first_0":100}}