anthropics / anthropics/claude-code-security-review
Missing security review guidance for SSRF
Abierto
- Lenguaje dominante
- Python
- Estrellas
- 6.2k
- Forks
- 683
- Métricas de merge de PR
- Sin PR fusionados en 30 d
Descripción
The project does not have any guiding prompts to cover SSRF issues that result from unvalidated/unsanitized user input that can control the host or protocol.
There are [instructions that exclude SSRF](https://github.com/anthropics/claude-code-security-review/blob/0c6a49f1fa56a1d472575da86a94dbc1edb78eda/.claude/commands/security-review.md?plain=1#L151) but no prompting that calls out what types of SSRF to look for.
> `> 13. SSRF vulnerabilities that only control the path. SSRF is only a concern if it can control the host or protocol.`
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Evaluación
Este issue todavía no se ha evaluado.