Analyze URL SSRF Risk

Overview

You pass a URL string; we lexically classify disallowed schemes, embedded credentials, IP literals (including decimal/octal/hex and IPv4-mapped IPv6), private/loopback/link-local targets, cloud metadata endpoints, internal hostnames, and control-character obfuscation. We never perform DNS resolution, never fetch the URL, and never follow redirects. A policy-clean result means no lexical finding fired — it does not certify the resolved target is safe. Do not use this as your sole SSRF control or for reachability checks.

Agents must not blindly pass user- or model-supplied URLs to fetchers — you need a fast lexical preflight before any network call.

When to use it

Scope

Non-goals

• Does not perform DNS resolution
• Does not fetch the URL
• Does not follow redirects
• Does not assert absolute safety — a policy-clean URL can still resolve to an unsafe target via DNS rebinding, redirects, or TOCTOU; enforce SSRF at fetch time

Properties

Capabilities

Cost & billing

Flat rate per invocation

File handling

How we handle your data

Input schema

Output schema

API contract

curl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"security.check_url_safety","input":{"url":"https://example.com"}}'

import { Squillify } from "@squillify/sdk";

const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });

const { output } = await sq.execute("security.check_url_safety", {"url":"http://169.254.169.254/latest/meta-data"});

Errors

Other limits

Limitations

• Does not perform DNS resolution
• Does not fetch the URL
• Does not follow redirects
• Does not assert absolute safety — a policy-clean URL can still resolve to an unsafe target via DNS rebinding, redirects, or TOCTOU; enforce SSRF at fetch time
• Verifying that a URL is reachable (requires network)

How to call

POST /v1/execute (requires authentication)

{
  "skillKey": "security.check_url_safety",
  "input": {
    "url": "http://169.254.169.254/latest/meta-data"
  }
}

Examples

{
  "url": "http://169.254.169.254/latest/meta-data"
}

{
  "safe": false,
  "riskLevel": "critical",
  "normalized": {
    "asciiHost": "169.254.169.254",
    "host": "169.254.169.254",
    "path": "/latest/meta-data",
    "scheme": "http",
    "port": -1
  },
  "findings": [
    {
      "code": "CLOUD_METADATA_ENDPOINT",
      "severity": "critical",
      "message": "Host targets a cloud metadata endpoint."
    }
  ]
}

{
  "url": "https://example.com/path"
}

{
  "safe": true,
  "riskLevel": "low",
  "normalized": {
    "asciiHost": "example.com",
    "host": "example.com",
    "path": "/path",
    "scheme": "https",
    "port": -1
  },
  "findings": []
}

Recommended use cases

• Preflight a URL before handing it to a fetcher
• Block SSRF targets from user- or model-supplied URLs

Avoid for

• Verifying that a URL is reachable (requires network)

Related skills

Composable with

Safety & privacy

• Runs without calling any external service.
• Your payloads are never stored permanently.
• Telemetry captures metadata only — never your payload contents.
• We never train models on your payloads.
• No human reviews your payloads.

Tags