ssrf
Detects HTTP requests to user-controlled URLs that can reach internal services or cloud metadata endpoints. Use when writing code that makes HTTP requests to URLs constructed from user input, fetches resources from caller-specified addresses, or proxies requests on behalf of users. Also invoke when implementing webhook receivers or URL preview features.
Install
With your agent
Install OMGSkills skill "thejefflarson/soundcheck:.claude/skills/ssrf" into this agent's normal skills directory: use the OMGSkills MCP get_skill tool, install only the pinned_install commit and path, verify SKILL.md against pinned_install.skill_md_sha, and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/thejefflarson/soundcheck /tmp/soundcheck && ln -s /tmp/soundcheck/.claude/skills/ssrf ~/.claude/skills/ssrfFrom README
SSRF Security Check (A10:2025 / API7:2023) What this checks Protects against Server-Side Request Forgery where an attacker tricks the server into making requests to internal services, cloud metadata endpoints, or arbitrary external hosts. Exploitation leads to internal network scanning, credential theft from cloud metadata APIs (169.254.169.254), and access to services behind firewalls. Vulnerable patterns Outbound HTTP fetch where the URL, host, or scheme comes from request input with no validation Webhook callback or URL-preview feature that follows whatever the caller supplies URL-fetch APIs that follow redirects by default, letting an allowlisted host 302 to an internal IP Hostname-only allowlists that do not also check the resolved IP — vulnerable to DNS rebinding Fix immediately Flag the vulnerable code, explain the risk, and suggest a fix establishing these properties.
More from this repo
authentication-failures
Detects weak password storage, flawed JWT validation, sessions surviving logout, and missing MFA in authentication code.
broken-access-control
Detects missing ownership checks, broken role enforcement, and IDOR vulnerabilities that let users access other users'...
concurrency-correctness
Detects multi-threaded code where a lock is held across a blocking operation, lock acquisition order risks deadlock,...