Detect and remediate SSRF vulnerabilities in outbound HTTP requests.
npx skills add https://github.com/thejefflarson/soundcheck --skill ssrf-thejefflarson
Please help me install this Agent Skill. Skill: ssrf Source: https://github.com/thejefflarson/soundcheck/tree/main/.claude/skills/ssrf Command: npx skills add https://github.com/thejefflarson/soundcheck --skill ssrf-thejefflarson
Protects against Server-Side Request Forgery by preventing outbound requests to internal services, cloud metadata endpoints, or arbitrary hosts supplied by users.
Validate every user-supplied URL against an allowlist and block private or metadata endpoints before performing the outbound request.
High-intent search queries and answers about installing and using this skill.
Preventing SSRF vulnerabilities involves validating every user-supplied URL against a host allowlist and blocking private or metadata endpoints before performing the outbound request.
Yes, this SSRF protection approach works with server-side applications performing dynamic URL calls, webhook handlers, and URL preview features across runtimes such as Python, Go, and Java.
To stop outbound requests from reaching cloud metadata endpoints via redirects, enforce redirect controls that prevent or revalidate redirects against your allowlist to prevent access bypass.
Securing webhook handlers against Server-Side Request Forgery requires applying URL scheme restrictions, host allowlisting with DNS resolution checks, and redirect controls to validate user input.
DNS resolution checking matters for allowlisting URLs because it blocks access to private or internal networks by verifying the resolved IP address before the outbound request is executed.
Limitations of URL scheme restrictions for SSRF prevention include bypass risks from unvalidated redirects, requiring additional host allowlists and DNS checks to block internal network access.
sjinksReview outbound request features against OWASP SSRF prevention guidance.
zebbernAutomate cloud security assessments across Azure, AWS, and GCP.
drewid74Audit code, dependencies, and deployments for exploitable vulnerabilities and credential leaks.
SeifBenayedTrace root causes of application errors and test failures using stack traces and git history.
