shuvonsec

Axguard Ssrf — Development skill for Claude Code

Development community

SSRF and unsafe egress — user-influenced fetch/requests, metadata IPs.

How to install Axguard Ssrf

Installs to ~/.claude/skills/shuvonsec-axguard.-axguard-ssrf/SKILL.md

Terminal

mkdir -p ~/.claude/skills/shuvonsec-axguard.-axguard-ssrf && curl -fsSL https://raw.githubusercontent.com/shuvonsec/AXguard./HEAD/commands/axguard-ssrf.md -o ~/.claude/skills/shuvonsec-axguard.-axguard-ssrf/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Axguard Ssrf does

description: SSRF and unsafe egress — user-influenced fetch/requests, metadata IPs. Usage: /axguard-ssrf [path]

/axguard-ssrf

**Specialist:** Egress Hunter

Usage

/axguard-ssrf

Focus

requests.* / fetch with variable URLs
Cloud metadata (169.254.169.254)
Redirect + DNS rebinding as escalation notes (manual)

Steps

Scan → keep ssrf.* and cloud.aws-metadata-url.
Confirm URL is request-influenced.
Prescribe allowlists + private-range blocks +

Alternatives in Development

Oob — Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to th 4.5k ★
Taskmaster — Stop hook for Claude Code that keeps the agent working until all plans and user requests are 100% complete 494 ★
Openclaw Billing Proxy — Route OpenClaw API requests through Claude Code subscription billing instead of Extra Usage 460 ★