cloud-imds-ssrf
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides documentation and detection logic for security testing and is free of malicious code or obfuscation.
- [DATA_EXFILTRATION]: The documentation describes accessing cloud metadata services (IMDS) to retrieve instance credentials. This is presented as an educational exercise for security practitioners and is balanced by comprehensive detection guidance.
- [PRIVILEGE_ESCALATION]: The skill outlines the methodology for escalating access via cloud roles, which is a documented security testing technique. The inclusion of defensive Sigma rules indicates a security-positive intent.
Audit Metadata