Detect SSRF vulnerabilities in spider code and web-scraping scripts.
npx skills add https://github.com/jadecli/researchers --skill ssrf-check
Please help me install this Agent Skill. Skill: ssrf-check Source: https://github.com/jadecli/researchers/tree/main/claude-code-security-review/.claude/skills/ssrf-check Command: npx skills add https://github.com/jadecli/researchers --skill ssrf-check
Scan spider code to identify Server-Side Request Forgery vulnerabilities and misconfigurations, helping security teams reduce exposure.
Run the SSRF check on your spider file to identify potential SSRF vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To scan spider code for SSRF vulnerabilities, run a check on your spider files to detect hardcoded private IPs, unsafe URL construction from user input, unsafe redirects, and DNS rebinding risks, receiving findings with suggested mitigations.
Common SSRF risks in web scraping scripts include hardcoded private IP ranges enabling internal network access, unsafe URL construction from user input, unsafe redirects, and DNS rebinding vulnerabilities that can lead to data exfiltration.
Detect unsafe DNS resolution and hardcoded private IPs in spider files by executing an SSRF check that flags potential internal network access risks and unsafe URL construction patterns, providing actionable mitigation suggestions.
Yes, you can check Scrapy spider files and web scraping scripts for SSRF misconfigurations by scanning them to identify lack of URL validation, unsafe redirects, and hardcoded private IP ranges that reduce exposure.
Prevent DNS rebinding and data exfiltration in web scraping scripts by identifying lack of URL validation and unsafe redirects through an SSRF vulnerability scan, which reports findings with suggested mitigations to secure your code.
jason660519Fetch HTTP pages, automate stealth browsers, bypass Cloudflare, and crawl spiders via CLI or Python.
SkobynDetect and exploit SSRF vulnerabilities in web applications.
stevengonsalvezChain 20+ security tools into a single web reconnaissance and vulnerability scanning pipeline.
kobogithubRun Semgrep SAST scans to detect security vulnerabilities in code.
