ssrf-server-side-request-forgery

HIGH RISK. This skill is not a defensive SSRF detector or remediation guide; it is an offensive exploitation manual for AI agents. Its core behavior is to drive victim servers toward internal networks, read local/metadata secrets, confirm reachability through OAST services, and chain SSRF into persistence or RCE. The data flows and payloads are incompatible with benign developer-assistance purposes.

The provided fragment is exploit-instruction content detailing SSRF/DNS rebinding and weaponization against internal services, including cloud metadata harvesting and persistence/RCE steps (cron/authorized_keys/webshell). While no executable dependency code is shown, inclusion of this material in a software package is a severe supply-chain red flag and warrants immediate review of the actual package files (entrypoints, install/postinstall scripts, dynamic execution, and network/file/command usage). Treat as potentially malicious/exploitation-facilitating content; confirm intent by examining the surrounding repository/published artifacts.