performing-ssrf-vulnerability-exploitation

SUSPICIOUS/HIGH-RISK skill. Its behavior is coherent with its stated purpose, but that purpose is to give an AI agent offensive SSRF exploitation capability against live targets, including metadata and internal-network access. Install trust is mostly normal PyPI usage with modest hygiene issues, but the overall security risk is high because the skill materially increases attack capability and can expose sensitive internal data or credentials.

This file implements an offensive SSRF testing/exploitation agent with payloads targeting cloud instance metadata and credential/token endpoints, internal service/port enumeration, SSRF bypass attempts, and file/gopher/dict protocol handler probes. It disables TLS verification (verify=False) and records response previews and headers into logs/report JSON, which may capture sensitive data returned via SSRF. While it is not overtly malware (no persistence/exfil code in the local script), its functionality is high-risk and should be treated as dangerous/dual-use in a dependency context.