ssrf

Analyze source code for SSRF vulnerabilities and cloud metadata endpoint risks.

12|1|Updated Feb 9, 2026

Search Tags:#security #vulnerability #owasp #network #cloud security #ssrf

Ready to run

npx skills add https://github.com/florianbuetow/claude-code --skill ssrf-florianbuetow

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ssrf
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/ssrf
Command: npx skills add https://github.com/florianbuetow/claude-code --skill ssrf-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and helps you fix Server-Side Request Forgery (SSRF) vulnerabilities, which can expose sensitive internal systems and cloud metadata.

Core Features & Use Cases

Vulnerability Detection: Analyzes code for common SSRF patterns like insecure URL fetching, missing IP validation, and improper redirect handling.
Cloud Security Focus: Specifically checks for risks related to accessing cloud provider metadata endpoints.
Use Case: You suspect your web application might be vulnerable to SSRF. Run this Skill to scan your codebase and receive detailed findings with remediation advice.

Quick Start

Scan the current project for Server-Side Request Forgery vulnerabilities.

Frequently Asked Questions about ssrf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan source code for SSRF vulnerabilities?▼

To scan source code for SSRF vulnerabilities, analyze the codebase to detect insecure URL fetching, missing IP range validation, and improper redirect handling. This identifies potential Server-Side Request Forgery attacks mapped to OWASP Top 10 A10.

Can I detect cloud metadata endpoint access during SSRF analysis?▼

Yes, SSRF analysis specifically checks for risks related to accessing cloud provider metadata endpoints. It detects insecure URL fetching and validates URL schemes to prevent unauthorized access to internal cloud infrastructure.

How does data flow analysis identify insecure URL fetching?▼

Data flow analysis tracks user-controlled input propagating to network requests to identify insecure URL fetching. It maps detected vulnerabilities to OWASP Top 10 2021 A10 and validates URL schemes and IP ranges to expose SSRF attack vectors.

Does this SSRF detection integrate with semgrep and bandit?▼

Yes, SSRF detection integrates with scanners like semgrep and bandit. This integration enhances vulnerability detection by combining data flow analysis with automated scanning to identify insecure URL fetching and cloud metadata endpoint access.

What is the best way to prevent Server-Side Request Forgery in web applications?▼

The best way to prevent Server-Side Request Forgery is to validate URL schemes, restrict IP ranges, and block access to cloud metadata endpoints. Analyzing source code for missing validation and improper redirect handling provides remediation advice.

When do I need to check for OWASP Top 10 A10 vulnerabilities?▼

You need to check for OWASP Top 10 A10 vulnerabilities when your web application fetches URLs or handles user-controlled network requests. Analyzing source code for SSRF patterns exposes sensitive internal systems and cloud metadata to unauthorized access.