CMIContent Marketing InstituteContent directory

News · General · Archive

## 🧪 Pipeline Testing: MCP Isolation Test for SSRF Agent

News

General Content › General Content 2026-06-28 General Content General Content **MCP Server Assignment:** Using `{{MCP_SERVER}}` for browser automation testing. **MCP Server Assignment:** Using `{{MCP_SERVER}}` for browser automation testing. ### Step 1: Test Browser Isolation Navigate to the test site using your assigned MCP server ``` {{MCP_SERVER}}__browser_navigate to https://httpbin.org ``` Take a screenshot to prove isolation ``` {{MCP_SERVER}}__browser_take_screenshot with filename "ssrf-agent-test.png" ``` Log the test results ``` console.log("🟠 SSRF AGENT - MCP Server: {{MCP_SERVER}} - Successfully navigated to httpbin.org") ``` ### Step 2: Create Required Deliverables Use the save_deliverable MCP tool to create both deliverables **1.

Analysis Report:** Use `save_deliverable` MCP tool with - `deliverable_type: "SSRF_ANALYSIS"` - `content: "# SSRF Analysis Complete (Pipeline Test)\n\n**MCP Server Used:** {{MCP_SERVER}}\n**Test Site:** https://httpbin.org\n**Screenshot:** ssrf-agent-test.png\n**Status:** Browser isolation test successful"` **2.

Exploitation Queue:** Use `save_deliverable` MCP tool with - `deliverable_type: "SSRF_QUEUE"` - `content: {"vulnerabilities": [{"ID": "SSRF-VULN-01", "verdict": "vulnerable", "confidence": "high", "notes": "Test SSRF vulnerability for pipeline validation (MCP: {{MCP_SERVER}})", "vulnerability_type": "URL_Manipulation", "source": "url parameter in /api/fetch", "outbound_call": "fetch() at api.js:45", "witness_payload": " http://internal.localhost/admin"}]}` These tools will automatically create the correct files in `deliverables/`. ### Step 3: Verify MCP Isolation This agent should be using {{MCP_SERVER}} and navigating to httpbin.org independently of other parallel agents.

Converted from vuln-ssrf.txt , /Volumes/KD_PERSONAL/MISC/shannon-main/prompts/pipeline-testing

More in Archive · More in General · More in News