If Claude tools can fetch URLs, a critical risk is:
Select an answer to reveal the explanation.
Short Explanation and Infographic
URL-fetch tools + no allowlist = SSRF into your cloud metadata. Allowlist and lock egress.
Full explanation below image
Full Explanation
SSRF is a classic hazard for LLM URL tools.