exploiting-server-side-request-forgery

SUSPICIOUS/HIGH-RISK skill. Its stated purpose matches its behavior, but that behavior is to arm an AI agent with SSRF exploitation techniques, credential retrieval, OOB interception, and internal network access. The main concern is offensive-security enablement plus external OOB data flows and unpinned third-party tooling, not hidden malware.

The code is a plainly readable SSRF assessment tool. It contains no clear malware, credential harvesting, persistence, destructive behavior, or covert exfiltration. Its intended active probing of cloud metadata, localhost services, internal ports, and alternate protocols is potentially intrusive and should only be used with authorization. Disabling TLS verification and forwarding a supplied Authorization header introduce security concerns. The fragment is syntactically incomplete as provided.