genpark-agent-ephemeral-network-egress-firewall-skill

mcp
Guvenlik Denetimi
Uyari
Health Uyari
  • No license — Repository has no license file
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 8 GitHub stars
Code Gecti
  • Code scan — Scanned 4 files during light audit, no dangerous patterns found
Permissions Gecti
  • Permissions — No dangerous permissions requested

Bu listing icin henuz AI raporu yok.

SUMMARY

GenPark AI Agent Skill - Zero-dependency IP/CIDR egress packet validator restricting agent outbound traffic to trusted registries.

README.md

GenPark AI Agent Skill - Agent Ephemeral Network Egress Firewall

Zero-dependency IP/CIDR and domain packet validator restricting sandbox outbound traffic to verified registries while blocking metadata endpoints (169.254.169.254).

Verified by GenPark AI and compatible with Model Context Protocol (MCP).

Architecture Diagram

graph TD
    A[Agent Outbound Socket Request] --> B[Egress Firewall Inspector]
    B --> C{Is Destination Cloud Metadata IP 169.254.169.254?}
    C -->|Yes| D[IMMEDIATE DROP & Security Tripwire Alert]
    C -->|No| E{Is Host on Trusted Registry Whitelist?}
    E -->|pypi.org / npmjs.org| F[Allow Outbound Connection]
    E -->|Untrusted / Unknown Domain| G[Block & Log Policy Violation]

Features

  • Anti-SSRF Armor: Automatically drops requests targeting instance identity credentials.
  • Pure Python Standard Library: Leverages built-in ipaddress module with zero external dependencies.

Yorumlar (0)

Sonuc bulunamadi