genpark-agent-ephemeral-network-egress-firewall-skill
mcp
Uyari
Health Uyari
- No license — Repository has no license file
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 8 GitHub stars
Code Gecti
- Code scan — Scanned 4 files during light audit, no dangerous patterns found
Permissions Gecti
- Permissions — No dangerous permissions requested
Bu listing icin henuz AI raporu yok.
GenPark AI Agent Skill - Zero-dependency IP/CIDR egress packet validator restricting agent outbound traffic to trusted registries.
README.md
GenPark AI Agent Skill - Agent Ephemeral Network Egress Firewall
Zero-dependency IP/CIDR and domain packet validator restricting sandbox outbound traffic to verified registries while blocking metadata endpoints (169.254.169.254).
Verified by GenPark AI and compatible with Model Context Protocol (MCP).
Architecture Diagram
graph TD
A[Agent Outbound Socket Request] --> B[Egress Firewall Inspector]
B --> C{Is Destination Cloud Metadata IP 169.254.169.254?}
C -->|Yes| D[IMMEDIATE DROP & Security Tripwire Alert]
C -->|No| E{Is Host on Trusted Registry Whitelist?}
E -->|pypi.org / npmjs.org| F[Allow Outbound Connection]
E -->|Untrusted / Unknown Domain| G[Block & Log Policy Violation]
Features
- Anti-SSRF Armor: Automatically drops requests targeting instance identity credentials.
- Pure Python Standard Library: Leverages built-in
ipaddressmodule with zero external dependencies.
Yorumlar (0)
Yorum birakmak icin giris yap.
Yorum birakSonuc bulunamadi