Identifies and quantifies SSRF vulnerabilities by tracing user input to outbound network calls.
npx skills add https://github.com/utkusen/sast-skills --skill sast-ssrf
Please help me install this Agent Skill. Skill: sast-ssrf Source: https://github.com/utkusen/sast-skills/tree/main/sast-files/.agents/skills/sast-ssrf Command: npx skills add https://github.com/utkusen/sast-skills --skill sast-ssrf
SSRF vulnerabilities in codebases where the server can be tricked into making outbound requests to arbitrary destinations. This skill identifies outbound network call sites and evaluates risk.
Run the SSRF assessment on your codebase to generate the ssrf-results.md file.
High-intent search queries and answers about installing and using this skill.
To find SSRF vulnerabilities, this skill locates outbound network call sites and traces whether user input influences request destinations. It applies a three-phase workflow of recon, batched verification, and merge to identify and quantify risks.
Detecting user-controlled outbound network calls is done by analyzing common HTTP clients, sockets, and URL-fetching patterns. The skill performs taint analysis to verify if user input reaches these outbound call destinations across multiple languages.
Static analysis traces SSRF taint by first discovering outbound calls during a recon phase, then batched verifying if user input influences those destinations, and finally merging the consolidated findings into a structured report.
Yes, you need an architecture document to perform SSRF code analysis. The skill depends on the sast/architecture.md file being present in your project to properly map and trace outbound network call sites.
Yes, you can scan multi-language projects for SSRF vulnerabilities. The skill supports multi-language projects by analyzing common HTTP clients, sockets, and URL-fetching patterns across different frameworks.
SSRF vulnerability assessment results are saved to the sast/ssrf-results.md file. This output file consolidates the findings from the recon, batched verification, and merge phases into a structured report.
googleBuild a content-addressed semantic-unit index of symbols, call edges, and function boundaries from source code.
thejefflarsonDetect and remediate SSRF vulnerabilities in outbound HTTP requests.
Endor-Solutions-ArchitectureRun static application security testing to detect code-level vulnerabilities in a repository.
cmndcntrlcyberProvide security payloads and bypass techniques for web application penetration testing.
