If Claude tools can fetch URLs, a critical risk is:
Select an answer to reveal the explanation.
Short Explanation
URL-fetch tools + no allowlist = SSRF into your cloud metadata. Allowlist and lock egress.
Full Explanation
SSRF is a classic hazard for LLM URL tools.