How do I install the Hunt Ssrf skill?

Run npx skillmds@latest add duriantaco/hunt-ssrf in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Hunt Ssrf safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Hunt Ssrf?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Hunt Ssrf free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Hunt Ssrf?

duriantaco (@duriantaco) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Hunt Ssrf by duriantaco — Agent Skill

Name: Hunt Ssrf
Author: duriantaco

Hunt Ssrf

Investigate authorized server-side request forgery and URL-fetch boundaries. Use when typed discovery identifies server-side webhooks, callbacks, previews, proxying, imports, remote-resource fetches, URL parser differentials, or a suspected server-origin request primitive.

duriantaco 5ebb298 2 files · 1.8 KB Updated Sep 17, 2026

File contents

Hunt Server-Side Request Boundaries

Treat this card as advisory prioritization. Scope, TrafficPolicy, replay contracts, and native evidence remain authoritative.

Workflow

Select a typed URL-fetch operation and preserve its method, identity, fields, and encoding.
Pair an ordinary baseline with a same-shape negative control; change one URL component.
Use ssrf_boundary; use file_fetch_parser only for a typed import or parser. The SSRF specialist includes fixed internal and metadata destinations, so run it only if all are authorized.
Separate server-origin requests from redirects, reflection, validation, and caching. Preserve redacted replays, deltas, and evidence references whether or not a challenge artifact exists.

Evidence Gate

Confirm only a controlled target-origin request or protected-resource differential unexplained by the paired control. Status, timing, DNS behavior, reflected URLs, and errors remain observations. Keep any contract_missing result suspected rather than promoting it.

Stop Conditions

Stop without a typed sink, replay, safe comparison, or remaining policy budget. Do not add range scans or unapproved out-of-band destinations, and redact returned secrets.

Frequently asked questions