payloads-ssrf
Fail
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: CRITICALOBFUSCATIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill provides numerous payloads specifically designed to extract sensitive information, such as cloud metadata from AWS/GCP (169.254.169.254) and local system files like /etc/passwd via the file:// protocol.
- [OBFUSCATION]: Includes detailed instructions on bypassing security filters using alternative IP representations (Octal, Hex, Decimal), double URL encoding, and enclosed alphanumeric Unicode characters (e.g., ⓔⓧⓐⓜⓟⓛⓔ.ⓒⓞⓜ).
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a repository for injection payloads without providing boundary markers or sanitization logic. If an agent processes these strings from SKILL.md (ingestion point) without proper delimiters, it may inadvertently attempt to use its native capabilities (like file reading or network requests) to execute these attacks on its own environment.
- [EXTERNAL_DOWNLOADS]: Links to multiple third-party security tools and payload repositories on GitHub, such as SSRFmap, Gopherus, and See-SURF. It also references the domain 1u.ms, which is a utility for DNS rebinding exploitation that has been flagged by automated scanners for its association with malicious activities.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata