Secure URL Fetcher

Safely fetch external web resources while blocking Server-Side Request Forgery (SSRF) and DNS Rebinding.

Protocol

Invoke whenever fetching user-provided or external URLs (RSS, JSON APIs, remote files, webhooks) to ensure requests cannot target private networks, localhost, or cloud metadata endpoints.

Execution

uv run <skill_dir>/secure-fetcher.py "<URL>"

Security Pipeline