performing-ssrf-vulnerability-exploitation

SUSPICIOUS. The skill is internally consistent, but it equips an AI agent with active SSRF exploitation techniques against metadata and internal services, which is a high-risk offensive security capability. Install trust is mostly benign and low-risk; the main concern is the exploit-focused operational scope, not malware or hidden exfiltration.

This file implements an offensive SSRF testing/exploitation agent with payloads targeting cloud instance metadata and credential/token endpoints, internal service/port enumeration, SSRF bypass attempts, and file/gopher/dict protocol handler probes. It disables TLS verification (verify=False) and records response previews and headers into logs/report JSON, which may capture sensitive data returned via SSRF. While it is not overtly malware (no persistence/exfil code in the local script), its functionality is high-risk and should be treated as dangerous/dual-use in a dependency context.