Analyze source code for SSRF vulnerabilities and cloud metadata endpoint risks.
npx skills add https://github.com/florianbuetow/claude-code --skill ssrf-florianbuetow
Please help me install this Agent Skill. Skill: ssrf Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/ssrf Command: npx skills add https://github.com/florianbuetow/claude-code --skill ssrf-florianbuetow
This Skill identifies and helps you fix Server-Side Request Forgery (SSRF) vulnerabilities, which can expose sensitive internal systems and cloud metadata.
Scan the current project for Server-Side Request Forgery vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To scan source code for SSRF vulnerabilities, analyze the codebase to detect insecure URL fetching, missing IP range validation, and improper redirect handling. This identifies potential Server-Side Request Forgery attacks mapped to OWASP Top 10 A10.
Yes, SSRF analysis specifically checks for risks related to accessing cloud provider metadata endpoints. It detects insecure URL fetching and validates URL schemes to prevent unauthorized access to internal cloud infrastructure.
Data flow analysis tracks user-controlled input propagating to network requests to identify insecure URL fetching. It maps detected vulnerabilities to OWASP Top 10 2021 A10 and validates URL schemes and IP ranges to expose SSRF attack vectors.
Yes, SSRF detection integrates with scanners like semgrep and bandit. This integration enhances vulnerability detection by combining data flow analysis with automated scanning to identify insecure URL fetching and cloud metadata endpoint access.
The best way to prevent Server-Side Request Forgery is to validate URL schemes, restrict IP ranges, and block access to cloud metadata endpoints. Analyzing source code for missing validation and improper redirect handling provides remediation advice.
You need to check for OWASP Top 10 A10 vulnerabilities when your web application fetches URLs or handles user-controlled network requests. Analyzing source code for SSRF patterns exposes sensitive internal systems and cloud metadata to unauthorized access.
allsmogTrace data flows and verify vulnerabilities using Code Property Graphs and CPGQL.
dapperdiversGenerate structured markdown penetration test reports from JSON security scan findings.
chrismcmackenCreate custom Semgrep rules with metadata and tests for vulnerability detection.
yhy0Detect and exploit server-side request forgery vulnerabilities in URL parameters.
