get_replay_details

1 finding on this tool

1. highssrf surfacef-r8-get_replay_details

   Tool `get_replay_details` accepts an unconstrained URL / endpoint parameter

   The parameter(s) `replayUrl` look like URL or endpoint inputs but carry no `pattern` or `enum` constraint. An agent tricked by an indirect-injection payload can invoke this tool with an internal-service URL (e.g. `http://169.254.169.254/`) to exfiltrate cloud metadata, probe internal APIs, or pivot to services the host can reach but the caller cannot.

   fix: Constrain the URL parameter with an allow-list `enum`, or a `pattern` that restricts scheme and domain. Validate server-side against an allow-list and reject private / loopback / link-local address ranges at the HTTP client level.

   OWASP LLM07NIST MANAGE-2.2ATLAS T0051