sast-ssrf

sast-ssrf is a skill for Claude Code, Codex from capture0x/YeepForge. It costs 99 tokens per session (6,880 once invoked), scanned B, original, no licence file.

A source-code review for Server-Side Request Forgery (SSRF), where attacker-controlled input makes a server send requests to unintended destinations. It finds outbound request code and traces user input to those destinations.

In plain words
What is it for?
Use it to review URL fetchers, webhooks, proxies, and other server-side network requests for unsafe input handling.
Why use it?
It helps identify code that could let attackers reach internal services or other restricted systems through your server. The architecture map must be created first.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/capture0x/yeepforge/sast-ssrf
Any agent
npx skills add capture0x/YeepForge --skill sast-ssrf
Clone the repo
git clone --depth 1 https://github.com/capture0x/YeepForge

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for sast-ssrf

README.md
[![agentmods](https://agentmods.dev/badge/skills/capture0x/yeepforge/sast-ssrf.svg)](https://agentmods.dev/skills/capture0x/yeepforge/sast-ssrf)
Your own site
<a href="https://agentmods.dev/skills/capture0x/yeepforge/sast-ssrf"><img src="https://agentmods.dev/badge/skills/capture0x/yeepforge/sast-ssrf.svg" alt="Measured on agentmods" height="20"></a>
Per session 99 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,880 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 3 findings. Scan, not verified.
Origin unknown No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00099 $0.06880
Opus 5 $0.00049 $0.03440
Sonnet 5 $0.00020 $0.01376
Haiku 4.5 $0.00010 $0.00688

Measured 4d ago against content hash 05ccb772feaa, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

sast-ssrf scanned grade B with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Cloud metadata endpointmediumServer-side request forgery

One request to 169.254.169.254 can return temporary IAM credentials.

> - **Blocklist of private IP ranges / metadata endpoints**: `169.254.169.254`, `10.0.0.0/8`, `192.168.0.0/16`, etc. - **not** sufficient. Bypassable via DNS rebinding, alternate IP representations, and redirect chains.

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- HTTP client calls where the URL or host is built from user input: `requests.get(user_url)`

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

> - `subprocess.run(["curl", url, ...])`, `subprocess.Popen(["wget", url, ...])`
modules/sast_skills/sast-ssrf/SKILL.md · 544 lines

The source is not reproduced here

A licence we could not identify

The repository carries a LICENSE file, but it is custom or dual enough that GitHub cannot name it and neither can this catalogue. Unknown terms are not permission, so the body is not copied here. Read the licence at the source and decide for yourself.

Read it on GitHub

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 544 lines · 99 tokens per session scan B 05ccb772feaa

Subscribe to this mod's changes

sast-ssrf is a skill published in the GitHub repository capture0x/YeepForge (1 stars, last pushed 11d ago), with no licence file. It adds 99 tokens to every session and 6,880 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it B with 3 findings (cloud metadata endpoint, makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

orchardcore-crestapps-recipes

Skill for CrestApps recipe schema and execution extensions in Orchard Core. Covers generated JSON Schema for recipe handlers, content definition and item schemas, custom IRecipeStep providers, IContentSchemaDefinition contributions, extensible schemas for the Layers, Sitemaps, deployment, AdminMenu, Queries…

CrestApps/CrestApps.AgentSkills · 202 tokens

orchardcore-content-fields

Skill for adding and configuring common Orchard Core content fields. Covers field settings, Liquid rendering, supported editor options, display modes, and migration patterns. Use this skill when requests mention Orchard Core Content Fields, Add and Configure Content Fields, General Pattern for Adding a Field…

CrestApps/CrestApps.AgentSkills · 189 tokens

orchardcore-ai-chat

Skill for configuring AI Chat in Orchard Core using the CrestApps AI Chat module. Covers chat profiles, admin chat UI, frontend chat widgets, provider connections, and the AI Agent module for task automation. Use this skill when requests mention Orchard Core AI Chat, Configure AI Chat, Available AI Completion…

CrestApps/CrestApps.AgentSkills · 208 tokens

orchardcore-ai-data-sources

Skill for configuring AI Data Sources in Orchard Core using the CrestApps AI Data Sources modules. Covers knowledge base indexing, RAG search, embedding generation, vector search backends (Azure AI Search and Elasticsearch), data source alignment, and linking data sources to AI profiles. Use this skill when requests…

CrestApps/CrestApps.AgentSkills · 204 tokens

orchardcore-ai-documents

Skill for configuring AI Documents in Orchard Core with CrestApps modules. Covers document upload, text extraction, chunking, vector indexing, and Retrieval-Augmented Generation (RAG) for AI chat. Supports PDF, OpenXml (docx, xlsx, pptx), and plain-text formats with file-system or Azure Blob storage and Azure AI…

CrestApps/CrestApps.AgentSkills · 125 tokens

orchardcore-custom-indexing-elasticsearch

Skill for creating Orchard Core custom indexing pipelines for arbitrary data using Elasticsearch, based on CrestApps AI Memory and OrchardCore.Indexing patterns. Use this skill when requests mention Orchard Core Custom Indexing for Elasticsearch, Create a custom Elasticsearch index for arbitrary data, When to use this…

CrestApps/CrestApps.AgentSkills · 187 tokens