What problem does it solve? In cloud security CTF challenges, reaching an instance metadata endpoint is only half the battle; this Skill guides you through proving the full chain from metadata access to issued credentials to accepted cloud or cluster privilege, avoiding the common trap of demonstrating reachability without demonstrating impact. ## Core Features & Use Cases - Metadata Reachability Mapping: Records the exact path to metadata endpoints including headers, hop limits, session tokens, and whether access comes from local processes, pods, SSRF, or host routing. - Credential Issuance Proof: Documents how metadata responses become usable tokens, temporary credentials, or workload identities, capturing role names, audiences, issuers, and expiration. - Trust Path Reduction: Compresses findings into the smallest replayable chain from reaching surface to accepted privilege, pinpointing whether the weakness lives in reachability, role trust, or downstream policy. - Use Case: During a cloud CTF challenge, you obtain SSRF on a web pod. Use this Skill to systematically prove the SSRF reaches the link-local metadata endpoint, extract a workload identity token, and demonstrate which cloud API accepts it for privilege escalation. ## Quick Start Ask the orchestrator to route you here, then request: map the metadata reachability path from this pod and prove which credentials the metadata service issues and which cloud API accepts them.
