Open-source plugin hard-blocks Qwen's hallucinated signed OSS URLs before agent tool calls
builderjaydub · x · 2026-10-27
qwen-block-proxy-artifacts is an opencode plugin that hard-blocks hallucinated file-proxy artifact URLs before any tool call goes out.
The trigger: Qwen 3.8 Flash Next was observed fabricating signed Aliyun OSS "file proxy" links — complete with Expires, OSSAccessKeyId and Signature parameters — and feeding them to webfetch, MCP fetchers, or curl. Nobody configured those hosts; the model simply regurgitated the URL shape memorized from pretraining data.
The plugin pattern-matches these hallucinated URL shapes and blocks them pre-dial-out, keeping agents from chasing nonexistent links. MIT-licensed, with tests and a SURGERY.md write-up.
More from coding & agent
- Cursor's new Agent SDK copies eve.dev conventions, signaling an emerging standard for agentic development — cramforce · 2026-10-27
- davidfowl claps back at theo: too many hand-merged PRs means you work with people, not agents — rakyll · 2026-10-27
- QuixiAI Open-Sources QuixiDesk, a Claude Desktop Clone That Runs Any Model — QuixiAI · 2026-10-27
- "Living on-call with Codex and Claude": devs joke their agents pager them 24/7 — sloppenheimer · 2026-10-27
- Power user plans full trip with AI agents: great at rebooking, terrible at audit trails — manosaie · 2026-10-27
- Dev builds an agent escape room: Beam solves puzzles by writing Python in CoreWeave Sandbox — wandb · 2026-10-27