--- title: "block-unapproved-egress" description: "Best-effort guard against exfiltration through the tool channel: a network command (curl/wget/Invoke-WebRequest) that UPLOADS data, POST/PUT, --data/--form, --upload-file, --post-file, to a host outside the egress allowl" canonical: https://agentpluginsdirectory.com/plugins/block-unapproved-egress--open-coder-ai-3 last-updated: 2026-10-01 --- # block-unapproved-egress Best-effort guard against exfiltration through the tool channel: a network command (curl/wget/Invoke-WebRequest) that UPLOADS data, POST/PUT, --data/--form, --upload-file, --post-file, to a host outside the egress allowlist. The allowlist defaults to package registries and code hosting and is meant to be extended with your org's own domains; a host matches by exact name or "." suffix. Fetch-only traffic is left alone. A schemeless or protocol-relative target is checked too, from the last non-flag token, but only when no explicit http(s):// URL appears, once one has, it alone decides. Options are parsed as curl reads them, so -sd @file is an upload. Tool-time FLOOR, not a network sandbox. Known bypasses: ~/.curlrc, obfuscated payloads, non-standard clients, a language runtime. Escape: 'pragma: allowlist egress'. - Slug: block-unapproved-egress--open-coder-ai-3 - Publisher: chock-core - Repository: https://github.com/open-coder-ai/chock-copilot-plugins - Manifest: agent-plugins/block-unapproved-egress/plugin.json - Version: 0.1.0 - License: Apache-2.0 - Category (editorial): security - Skills: 1 (block-unapproved-egress) - MCP servers: 0 - Stars: 2 - Repository created: 2026-08-23 - Repository last pushed: 2026-09-30 - Publisher type: Organization - Listing: https://agentpluginsdirectory.com/plugins/block-unapproved-egress--open-coder-ai-3 - Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json ## Skills - block-unapproved-egress: Best-effort guard against exfiltration through the tool channel: a network command (curl/wget/Invoke-WebRequest) that UPLOADS data, POST/PUT, --data/--form, --upload-file, --post-file, to a host outside the egress allowlist. The allowlist defaults to package registries and code hosting and is m… Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.