ck-rag-skill

clawhub:ck-rag-skill

View source

77/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

Score

77/100

HIGH 1

MEDIUM 1

Findings (2)

HIGH

Internal IP range access SSRF_002

ssrf-cloud L67

Detects references to private/internal IP ranges in URL context

http://172.28.20.46:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L185

Detects references to private/internal IP ranges in URL context

http://172.28.20.46:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.