From 055453c30edb301b546eeeefb1c66fe6a2a528b6 Mon Sep 17 00:00:00 2001 From: Arun Babu Neelicattu Date: Sat, 3 Oct 2026 23:28:31 +0200 Subject: [PATCH] docs(skill): document --allow-private-network for local fetches A local http://127.0.0.1:N fetch is blocked by the default SSRF gate and fails with "Access to private/internal IP address 127.0.0.1 is not allowed". The capture section did not mention the global --allow-private-network flag, which is easy to misread as a bug when targeting a local fixture or dev server. Added one sentence; no behavior change. --- skills/obscura/SKILL.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/skills/obscura/SKILL.md b/skills/obscura/SKILL.md index 5126d90..4c665b1 100644 --- a/skills/obscura/SKILL.md +++ b/skills/obscura/SKILL.md @@ -73,6 +73,10 @@ Use `--dump original` for a binary or raw HTTP response that should bypass DOM and JavaScript processing. Use `scrape` for many URLs when the requested output does not require one screenshot per URL. +A local `http://127.0.0.1:N` needs the global `--allow-private-network`, which +unblocks loopback, RFC1918 and link-local; without it the fetch fails with +`Access to private/internal IP address 127.0.0.1 is not allowed`. + ## Drive CDP Start the server: