ssrf-prevention
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides enterprise-grade defensive implementation patterns for SSRF prevention. It correctly identifies high-risk targets including cloud metadata endpoints (169.254.169.254) and private network ranges (RFC 1918).
- [SAFE]: The provided code samples implement security best practices such as hostname allowlisting, protocol restriction (HTTPS enforcement), DNS resolution checks to prevent bypasses, and redirect suppression (manual redirect handling).
- [SAFE]: Dependencies used in the code examples, such as
ipaddr.jsfor Node.js andrequestsfor Python, are standard industry tools for IP parsing and HTTP operations. No suspicious or unpinned remote dependencies were detected. - [SAFE]: The skill does not contain any prompt injection, data exfiltration, or persistence mechanisms. It serves as a security reference for developers to handle user-provided URLs safely.
Audit Metadata