chore: update pipeline testing vulnerability prompts

2026-03-03 02:05:09 +05:30
parent b62abfea4c
commit 3ec491b30b
5 changed files with 50 additions and 170 deletions
@@ -1,37 +1,13 @@
-## 🧪 Pipeline Testing: MCP Isolation Test for SSRF Agent
+Please complete these tasks using your MCP tools:

-**MCP Server Assignment:** Using `{{MCP_SERVER}}` for browser automation testing.
+1. Navigate to https://httpbin.org and take a screenshot:
+   - Use {{MCP_SERVER}}__browser_navigate to go to https://httpbin.org
+   - Use {{MCP_SERVER}}__browser_take_screenshot

-### Step 1: Test Browser Isolation
-1. Navigate to the test site using your assigned MCP server:
-   ```
-   {{MCP_SERVER}}__browser_navigate to https://httpbin.org
-   ```
+2. Save an analysis deliverable:
+   - Use save_deliverable with deliverable_type "SSRF_ANALYSIS"
+   - Content: "# SSRF Analysis Report\n\nAnalysis complete. No SSRF vulnerabilities identified."

-2. Take a screenshot to prove isolation:
-   ```
-   {{MCP_SERVER}}__browser_take_screenshot with filename "ssrf-agent-test.png"
-   ```
-
-3. Log the test results:
-   ```
-   console.log("🟠 SSRF AGENT - MCP Server: {{MCP_SERVER}} - Successfully navigated to httpbin.org")
-   ```
-
-### Step 2: Create Required Deliverables
-Use the save_deliverable MCP tool to create both deliverables:
-
-**1. Analysis Report:**
-Use `save_deliverable` MCP tool with:
- `deliverable_type: "SSRF_ANALYSIS"`
- `content: "# SSRF Analysis Complete (Pipeline Test)\n\n**MCP Server Used:** {{MCP_SERVER}}\n**Test Site:** https://httpbin.org\n**Screenshot:** ssrf-agent-test.png\n**Status:** Browser isolation test successful"`
-
-**2. Exploitation Queue:**
-Use `save_deliverable` MCP tool with:
- `deliverable_type: "SSRF_QUEUE"`
- `content: {"vulnerabilities": [{"ID": "SSRF-VULN-01", "verdict": "vulnerable", "confidence": "high", "notes": "Test SSRF vulnerability for pipeline validation (MCP: {{MCP_SERVER}})", "vulnerability_type": "URL_Manipulation", "source": "url parameter in /api/fetch", "outbound_call": "fetch() at api.js:45", "witness_payload": "http://internal.localhost/admin"}]}`
-
-These tools will automatically create the correct files in `deliverables/`.
-
-### Step 3: Verify MCP Isolation
-This agent should be using {{MCP_SERVER}} and navigating to httpbin.org independently of other parallel agents.
+3. Save a queue deliverable:
+   - Use save_deliverable with deliverable_type "SSRF_QUEUE"
+   - Content: {"vulnerabilities": []}