Chains Chains End-to-end skeletons that stitch multiple primitives into one exploit path. SSRF internal port scan (1) Second-order injection (1) Arbitrary file write to hot-reload RCE (1) HTML-to-PDF local file read (1) Cache poisoning through a reflected base URL (1)