shuvonsec

Axguard Ssrf — Development skill for Claude Code

Development community

SSRF and unsafe egress — user-influenced fetch/requests, metadata IPs.

How to install Axguard Ssrf

Installs to ~/.claude/skills/shuvonsec-axguard.-axguard-ssrf/SKILL.md

Terminal
mkdir -p ~/.claude/skills/shuvonsec-axguard.-axguard-ssrf && curl -fsSL https://raw.githubusercontent.com/shuvonsec/AXguard./HEAD/commands/axguard-ssrf.md -o ~/.claude/skills/shuvonsec-axguard.-axguard-ssrf/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Axguard Ssrf does


description: SSRF and unsafe egress — user-influenced fetch/requests, metadata IPs. Usage: /axguard-ssrf [path]

/axguard-ssrf

**Specialist:** Egress Hunter

Usage

/axguard-ssrf

Focus

  • requests.* / fetch with variable URLs
  • Cloud metadata (169.254.169.254)
  • Redirect + DNS rebinding as escalation notes (manual)

Steps

  1. Scan → keep ssrf.* and cloud.aws-metadata-url.
  2. Confirm URL is request-influenced.
  3. Prescribe allowlists + private-range blocks +

Alternatives in Development

  • Analyze Feature Requests — Prioritize feature requests by theme, impact, effort, and risk 7.8k ★
  • Oob — Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to th 4.5k ★
  • Harness Improvement — Update Kandev harness files from session learnings or explicit cross-platform harness requests 697 ★

Full documentation available on GitHub

View Source Repository