ssrf-hunter

SUSPICIOUS/HIGH-RISK skill. Its capabilities align with its stated purpose, but that purpose is offensive SSRF exploitation: cloud credential theft, internal scanning, file access, and OOB exfiltration. Official dependencies are limited, yet the skill materially enables unauthorized compromise and data exfiltration rather than safe defensive assessment.

This file implements an offensive SSRF testing/exploitation agent with payloads targeting cloud instance metadata and credential/token endpoints, internal service/port enumeration, SSRF bypass attempts, and file/gopher/dict protocol handler probes. It disables TLS verification (verify=False) and records response previews and headers into logs/report JSON, which may capture sensitive data returned via SSRF. While it is not overtly malware (no persistence/exfil code in the local script), its functionality is high-risk and should be treated as dangerous/dual-use in a dependency context.