Identify SSRF vectors in outbound HTTP requests and append findings to vulnerabilities.md.
npx skills add https://github.com/n4igme/randscript --skill vuln-ssrf
Please help me install this Agent Skill. Skill: vuln-ssrf Source: https://github.com/n4igme/randscript/tree/main/llm/skills/scode/vuln-ssrf Command: npx skills add https://github.com/n4igme/randscript --skill vuln-ssrf
This Skill helps security teams identify SSRF vulnerabilities where user-controlled input can trigger outbound HTTP requests, enabling proactive remediation before exploitation.
Scan the codebase for outbound HTTP calls controlled by user input and append SSRF findings to ./assessment/vulnerabilities.md.
High-intent search queries and answers about installing and using this skill.
To identify SSRF vulnerabilities, this Skill analyzes code paths and outbound HTTP requests to find where user input influences network calls. It detects unvalidated outbound requests and generates a structured vulnerability report with code locations and remediation steps.
SSRF threat modeling prioritizes potential attack paths based on threat-model alignment and input vectors. It evaluates whether user-controlled inputs triggering outbound requests are validated or exploitable, helping security teams focus on the most critical network call risks.
Yes, you can use this for bug bounty hunting to find SSRF bugs. It detects common patterns where user input triggers outbound HTTP requests and generates a structured report detailing affected files, risk levels, and remediation suggestions for submission.
Documenting outbound request vulnerabilities requires appending structured findings to a report. This Skill automatically generates and appends details including code locations, risk levels, and remediation steps directly to the ./assessment/vulnerabilities.md file.
Pattern-based scanning detects common SSRF patterns by analyzing code paths, network calls, and redirects. It determines whether user inputs influencing outbound HTTP requests are properly validated or exploitable, ensuring comprehensive coverage of attack vectors.
2389-researchReview changed files for security vulnerabilities, logic errors, and business-rule bugs before commits.
Logisoft-webScan code repositories for vulnerabilities in dependencies, secrets, and configurations.
utsavthakurDetect and analyze injection vulnerabilities in web applications.
uphiagoIdentify and validate high-severity GraphQL vulnerabilities including IDOR, SSRF, and auth bypass.
