Critical-risk tools in Huly
33 of the 218 tools in Huly are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
dedup_planner_todosDestructiveRemove duplicate Planner ToDo items that the Huly server sometimes creates more than once per issue
-
delete_attachmentDestructivePermanently delete an attachment. This action cannot be undone.
-
delete_cardDestructivePermanently delete a Huly card. This action cannot be undone.
-
delete_channelDestructivePermanently delete a Huly channel. This action cannot be undone.
-
delete_channel_messageDestructivePermanently delete a channel message. This action cannot be undone.
-
delete_commentDestructiveDelete a comment from a Huly issue. This action cannot be undone.
-
delete_componentDestructivePermanently delete a Huly component. This action cannot be undone.
-
delete_dm_messageDestructivePermanently delete a direct-message message. The
-
delete_documentDestructivePermanently delete a Huly document. This action cannot be undone.
-
delete_eventDestructivePermanently delete a calendar event. This action cannot be undone.
-
delete_issueDestructivePermanently delete a Huly issue. This action cannot be undone.
-
delete_issue_templateDestructivePermanently delete a Huly issue template. This action cannot be undone.
-
delete_labelDestructivePermanently delete a label/tag definition. Accepts label ID or title. This action cannot be undone.
-
delete_milestoneDestructivePermanently delete a Huly milestone. This action cannot be undone.
-
delete_notificationDestructivePermanently delete a notification. This action cannot be undone.
-
delete_organizationDestructivePermanently delete an organization identified by ID or exact name when that name is unique. Use with care - this cannot be undone. Useful for cleaning up duplicate organizations...
-
delete_personDestructivePermanently delete a person from Huly. This action cannot be undone.
-
delete_projectDestructivePermanently delete a Huly project. All issues, milestones, and components in this project will be orphaned. This action cannot be undone.
-
delete_relationDestructiveRemove a Relation between two documents. Idempotent: returns deleted=false if the relation no longer exists.
-
delete_tag_categoryDestructivePermanently delete a tag/label category. Accepts category ID or label name. Labels in this category will be orphaned (not deleted). This action cannot be undone.
-
delete_teamspaceDestructivePermanently delete a Huly document teamspace. This action cannot be undone.
-
delete_test_caseDestructivePermanently delete a test case. Accepts test case ID or name. This action cannot be undone.
-
delete_test_planDestructivePermanently delete a test plan. This does not delete associated test runs. Cannot be undone.
-
delete_test_resultDestructivePermanently delete a test result. Cannot be undone.
-
delete_test_runDestructivePermanently delete a test run. This does not delete associated test results. Cannot be undone.
-
delete_test_suiteDestructivePermanently delete a test suite. Accepts suite ID or name. This action cannot be undone.
-
delete_thread_replyDestructivePermanently delete a thread reply. This action cannot be undone.
-
delete_workspaceDestructivePermanently delete the current workspace. This action cannot be undone. Use with extreme caution.
-
remove_issue_relationDestructiveRemove a relation between two issues. Mirrors add_issue_relation:
-
remove_organization_memberDestructiveUnlink a person from an organization
-
remove_reactionDestructiveRemove an emoji reaction from an activity message.
-
remove_template_childDestructiveRemove a child (sub-task) template from an issue template by its child ID. Get child IDs from get_issue_template response.
-
remove_test_plan_itemDestructiveRemove a test case from a test plan by item ID. Get item IDs from get_test_plan.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.