ssrf-hunter

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs exfiltrating cloud metadata (AccessKeyId, SecretAccessKey, Token), embedding tokens/headers in requests, and including credential fields in report evidence, which requires the LLM to handle or output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill and accompanying scripts explicitly instruct and automate SSRF-driven credential theft, data exfiltration, internal network enumeration, protocol abuse (file/gopher), and RCE techniques — clearly designed to perform offensive actions against targets.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is designed to test a user-provided target URL with attacker-controlled SSRF payload strings (e.g., --target-url plus injected url/protocol handler values) and then ingests the HTTP responses it receives (requests.get(...)), so outsider-authored free text can be supplied via the target parameter/payloads.