Skills Guide

Outbound Interaction & OOB Detection

VerifiedSafe

Security assessment skill focused on verifying outbound interactions and out-of-band (OOB) validation. Used for testing SSRF, blind XSS, XXE/OOB, webhook abuse, or DNS/HTTP callback correlation. It enables reliable confirmation of asynchronous server-side behavior through unique tokens, timestamp correlation, and noise filtering.

Download and use
Sby Skills Guide Bot
SecurityIntermediate
6/2/2026
Claude Code
#oob-detection#ssrf#blind-xss#callback-validation#webhook-testing

Recommended for

Claude CodeSecurity auditSecurity engineer

Automated summary

This skill validates outbound interactions and out-of-band (OOB) communications during security assessments, such as SSRF callbacks, blind XSS beacons, or webhook abuse.

Strengths

  • Generates unique correlation identifiers per test, ensuring reliable traceability.
  • Distinguishes background noise from legitimate interactions using control payloads.
  • Provides a detailed correlation table (token, path, timestamp) for reproducible validation.

Limitations

  • Requires an external listener or callback service to capture interactions.
  • May produce false positives if retention windows are insufficient or the network is noisy.
  • Does not cover purely in-band vulnerabilities that do not require external callbacks.
When to use it

Use this skill when your test involves asynchronous interaction with a remote server, such as SSRF attacks, blind XSS, XXE OOB, or webhook abuse.

When not to use it

Do not use it for static tests, code reviews without execution, or scenarios where validation is entirely in-band without need for a callback.

Security analysis

Safe
Quality score85/100

The skill is a methodology guide for pentesters describing out-of-band detection techniques without any executable commands, destructive actions, or data exfiltration instructions. It poses no execution risk as it does not instruct the AI to run tools.

No concerns found

How this analysis is made

Examples

Blind XSS OOB detection
Test for blind XSS on the contact form by injecting a payload that triggers an out-of-band callback. Use a unique token for correlation and confirm the interaction via DNS lookup.
SSRF callback validation
Verify SSRF on the proxy endpoint by sending a request to a controlled callback server. Include a unique correlation ID in the URL and validate the callback with its timestamp.
XXE OOB exfiltration test
Exploit an XXE vulnerability to exfiltrate data out-of-band. Use an external DTD and a webhook callback to capture the content, and correlate the received data with the sent token.

name: pentest-outbound-interaction-oob-detection description: "Security assessment skill for outbound interaction and out-of-band (OOB) validation. Use when prompts include SSRF callback confirmation, blind XSS beacons, webhook abuse, XXE/OOB behavior, DNS/HTTP callback correlation, or asynchronous server-side interaction proof. Do not use when vulnerabilities are fully in-band and require no external callback correlation."

Outbound Interaction & OOB Detection

Activation Triggers (Positive)

  • ssrf callback
  • blind xss
  • webhook abuse
  • oob
  • dns interaction
  • asynchronous callback
  • xxe out of band

Exclusion Triggers (Negative)

  • fully in-band exploit
  • static code review only
  • report drafting only

Output Schema

  • Callback correlation table: token, payload path, timestamp, source context
  • Validation verdict: confirmed, not confirmed, inconclusive
  • Follow-on exploitation opportunities from confirmed outbound behavior

Instructions

  1. Generate unique per-test correlation identifiers before sending payloads.
  2. Ensure callback listener scope and retention are sufficient for delayed events.
  3. Correlate callbacks by token, path, and time window before confirmation.
  4. Differentiate noisy background traffic from test-linked interactions.
  5. Use control payloads to reduce false positives.
  6. Pass confirmed primitives to exploit or logic skills with full correlation evidence.

Should Do

  • Treat OOB validation as evidence discipline, not only payload dispatch.
  • Preserve immutable callback logs for auditability.
  • Include both positive and negative control outcomes.

Should Not Do

  • Do not claim confirmation without deterministic correlation.
  • Do not reuse tokens across unrelated tests.
  • Do not expose real secrets in callback payloads.

From the file to a first result

The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.

View the source and supporting files

This download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.

1. Download the file

Download SKILL.md

From the root of a test project, save the file as .skill-downloads/outbound-interaction-oob-detection-mm8o52ug/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.

Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.

mkdir -p '.skill-downloads/outbound-interaction-oob-detection-mm8o52ug' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/outbound-interaction-oob-detection-mm8o52ug/download' --output '.skill-downloads/outbound-interaction-oob-detection-mm8o52ug/SKILL.md.part' && mv '.skill-downloads/outbound-interaction-oob-detection-mm8o52ug/SKILL.md.part' '.skill-downloads/outbound-interaction-oob-detection-mm8o52ug/SKILL.md'

2. Check prerequisites

Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.

No recognized prerequisites section in this file. This does not mean it is self-contained: libraries, tools and access requirements may be mentioned elsewhere in the content or source repository.

The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.

3. Load the skill

After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.

Claude Code
test -f '.skill-downloads/outbound-interaction-oob-detection-mm8o52ug/SKILL.md' && test -s '.skill-downloads/outbound-interaction-oob-detection-mm8o52ug/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/pentest-outbound-interaction-oob-detection' && cp -R '.skill-downloads/outbound-interaction-oob-detection-mm8o52ug' '.claude/skills/pentest-outbound-interaction-oob-detection'

OpenSkills

OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.

Official OpenSkills installation
openskills install './.skill-downloads/outbound-interaction-oob-detection-mm8o52ug'

openskills read 'outbound-interaction-oob-detection-mm8o52ug'

Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.

For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.

openskills sync

Manual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.

4. Try a first task

Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:

Read .skill-downloads/outbound-interaction-oob-detection-mm8o52ug/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.

Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.

Related skills

DeFi AMM Security

Security

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, donation attacks, oracle manipulation, slippage, and integer math.

Claude CodeCursorCodexadvancedSafe 243,989
Skills Guide Bot

Semgrep Rule Creator

Security

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Includes test-first methodology, taint mode support, and validation steps. Helps when building targeted static analysis detections.

Claude CodeintermediateSafe 21,468
Skills Guide Bot

Dev Toolbar Review Guide

Security

Safety rules for the dev toolbar, PostHog client, and feature flags. Use when reviewing changes to dev-tools and related files, covering environment guards, override cookies, and SSE stream safety.

Claude CodeCursorCodexintermediateSafe 108,624
Skills Guide Bot