Critical-risk tools in Starfield
15 of the 233 tools in Starfield are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
bulk_delete_buyer_groupsDestructiveSoft-delete up to 50 buyer groups in ONE call, each cascading to its members. Use this instead of looping delete_buyer_group when cleaning many rooms out of a workspace. STRICTE...
-
cancel_agent_taskDestructiveCancel a queued or running agent/background task.
-
delete_actionDestructiveSoft-delete an action.
-
delete_buyer_groupDestructiveSoft-delete an entire buyer group (buyer room). CASCADES to every member seat in the room, so you do not need to empty it first. Does NOT delete the underlying people or the com...
-
delete_companyDestructiveSoft-delete a company.
-
delete_noteDestructiveDelete a note.
-
delete_opportunityDestructiveDelete an opportunity.
-
delete_partnerDestructiveSoft-delete a partner relationship.
-
delete_personDestructiveSoft-delete a person.
-
delete_webhookDestructiveDelete an outbound webhook subscription.
-
flag_work_itemDestructiveFlag a card as having a problem WITH THE CARD — unclear scope, no repro, a blocked dependency, a question waiting on an answer — or clear a flag once it is resolved. A flagged c...
-
forgetDestructiveSoft-delete a specific memory by ID. The memory will no longer appear in recall results.
-
paper_delete_documentDestructiveDelete a Paper document. Live writes require dryRun:false, approved:true, reason, and idempotencyKey.
-
paper_revoke_shareDestructiveRevoke a Paper share link. Live writes require dryRun:false, approved:true, reason, and idempotencyKey.
-
remove_buyer_group_memberDestructiveRemove one person from a buyer group. Does NOT delete the underlying person record. To remove the whole room, use delete_buyer_group instead — it cascades. Governed write: previ...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.