Critical-risk tools in Tanod
10 of the 308 tools in Tanod are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
audit_token_approvalsDestructivechainpeek: List a wallet's live token approvals and get revoke transactions. For tokens already pulled out use check_wallet_drain; for one allowance use get_allowance. Returns t...
-
aurora_forecastDestructiveskypeek: Aurora forecast: the chance of visible aurora at a location in the next 30-90 minutes. For Kp and solar wind use get_space_weather. Returns the chance (0 to 100 percent...
-
diff_textDestructiveutilpeek: Diff two texts: unified line diff, word or character changes. For PDF or Word files use compare_documents. Returns the differences between two texts: similarity ratio,...
-
image_metadataDestructiveimagepeek: Read an image's EXIF, GPS, XMP, IPTC and ICC metadata. To remove the metadata use image_strip_metadata. Returns an image's header and metadata without decoding its pi...
-
pdf_pipelineDestructivepdfpeek: Run up to 10 PDF operations in sequence on one PDF in a single call. For one operation use its own tool, such as pdf_rotate. Returns a PDF put through the `steps` in or...
-
pdf_protectDestructivepdfpeek: Password-protect a PDF. To remove a password use pdf_unlock; to black out content use pdf_redact. Returns the PDF encrypted with AES-256: `user_password` opens it; `own...
-
pdf_remove_pagesDestructivepdfpeek: Remove pages from a PDF. To keep only some pages use pdf_extract_pages. Returns the PDF without the selected pages (1-based: N, N-M, N-, -M, last); removed pages and ev...
-
pdf_reorder_pagesDestructivepdfpeek: Reorder, repeat or drop the pages of a PDF from a list of page numbers. To only drop pages use pdf_remove_pages. Returns a new PDF made of the pages in `order` (1-based...
-
compare_stablecoin_transfer_feesFinancialchainpeek: Compare USDC or USDT transfer fees on Base, Polygon, Ethereum, BNB, Arbitrum and Solana. For peg status use check_stablecoin_peg. Returns the fee of one USDC or USDT ...
-
transfer_preflightFinancialchainpeek: Preflight a USDC or USDT transfer: balance, gas, nonce, blacklist, recipient, simulation. For OFAC screening use check_sanctions; for a wallet's past pulls use check_...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.