domains / families / security / sast-ssrf

sast-ssrf

authentic

Detect Server-Side Request Forgery (SSRF) vulnerabilities in a codebase using a three-phase approach: recon (find outbound call sites), batched verify (trace user input to destinations in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/ssrf-results.md. Use when asked to find SSRF or server-side request forgery bugs.

When to use

• find SSRF bugs
• find server-side request forgery bugs
• detect outbound call sites
• trace user input to destinations
• consolidate batch results

When not to use

• open redirects
• XSS via URL
• IDOR
• hardcoded outbound calls

Skill page

Source