SKILL verified Apache-2.0 Self-run

Ssrf To Rce

Name: Ssrf To Rce
Availability: InStock
Author: MingyiSecLab

skill-mingyiseclab-mingyi-atlas-ssrf-to-rce · by MingyiSecLab

Build and validate SSRF pivot chains toward metadata/infra control and final code execution impact.

↗ Repository

— No reviews yet

0 installs

12 views

0.0% view→install

Install

$ agentstack add skill-mingyiseclab-mingyi-atlas-ssrf-to-rce

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

✓ Prompt-injection patterns
✓ Secret / credential exfiltration
✓ Dangerous shell & filesystem operations
✓ Untrusted network calls
✓ Known-malicious package signatures

What it can access

✓ Network access No
✓ Filesystem access No
✓ Shell / process execution No
✓ Environment & secrets No
✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Ssrf To Rce? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.

About

Chain: SSRF to RCE

Canonical path

SSRF reaches metadata/internal control plane.
Extract credential/token or access internal admin API.
Use credential to deploy or execute payload.
Confirm code execution and business impact.

Graph guidance

Add enables edges for each pivot.
Lower weights for direct pivots; higher for speculative pivots.
Run plan_attack_chains and then suggest_objectives_from_chains.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Author: MingyiSecLab
Source: MingyiSecLab/Mingyi-Atlas
License: Apache-2.0

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Write a review

Versions

v0.1.0 Imported from the upstream source.