CISO Security KitAppSecAI CISO
SSRF & XXE
OWASP Top 10 A10 — server-side request forgery and XML external entity flaws in parsers and network calls.
What this skill does
SSRF & XXE is a versioned playbook inside the CISO Security Kit. It runs on the AI CISO agent through the Procux skill runtime, producing structured, auditable output suitable for executive review and regulator submission.
- Kit
- CISO Security Kit
- Category
- AppSec
- Primary agent(s)
- AI CISO
- Tags
- owasp, appsec, ssrf, xxe
How to use it
- Sign in to your Procux workspace and open the platform dashboard.
- Pick the AI CISO agent, then pick SSRF & XXE from the CISO Security Kit catalog.
- Provide the required inputs (repo, document, endpoint, jurisdiction) — the agent runs the playbook and returns a structured report.
- Review, iterate, or export (PDF / JSON / Markdown) as part of your internal review cycle.
Related skills
- Authentication & Session FailuresOWASP Top 10 A07 — review authentication and session management flaws: broken logout, session fixation, weak credentials, MFA bypass.
- Broken Access ControlOWASP Top 10 A01 — review authorization flaws (BOLA, IDOR, privilege escalation, missing role checks).
- Cryptographic FailuresOWASP Top 10 A02 — audit cryptography usage: weak algorithms, key management, TLS config, at-rest / in-transit encryption gaps.