web-vuln-ssrf

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs fetching and printing cloud credentials (AccessKeyId, SecretAccessKey, Token), building and documenting full Authorization headers/curl commands that can contain bearer tokens, and telling the reporter to record those secret values verbatim in the report, which requires the LLM/agent to handle and output secrets directly.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This skill contains explicit, step‑by‑step offensive instructions to exploit SSRF for internal service access, cloud metadata credential exfiltration, filter/encoding bypasses, and chain escalation to RCE — high-risk attacker functionality.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill ingests outsider-authored free text by allowing the user to set SECSKILL_TARGET and then using curl to fetch and grep the target’s HTML/JS source (curl -sk "$TARGET" ... | grep ...) to identify SSRF injection points at runtime.