That's a known bug in older versions — the WebFetch hook wasn't blocking reliably. Fixed in v0.7.1.
npm install -g context-mode@latest
If you're on the plugin install, re-run:
/plugin marketplace add mksglu/claude-context-mode
/plugin install context-mode@claude-context-mode
Then restart Claude Code. Sorry about that.