Critical-risk tools in Claude Code Toolkit
5 of the 40 tools in Claude Code Toolkit are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cleanup_backupsDestructiveDelete old backup files to free up disk space.
-
wipe_tracesDestructiveSecurely wipe ALL Claude Code traces. Overwrites files with zeros before deletion. Requires explicit confirmation.
-
clean_claude_directoryDestructiveAnalyze and clean the .claude directory. Removes debug logs, empty todos, old snapshots, and orphaned data to free disk space.
-
clean_tracesDestructiveSelectively clean Claude Code traces by category, age, or project.
-
enforce_retentionDestructiveApply data retention policy by deleting sessions older than specified days.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.