Critical-risk tools in Ha Nexus Agent
30 of the 276 tools in Ha Nexus Agent are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
abort_config_flowDestructiveAbort a config flow in progress.
-
abort_options_flowDestructiveAbort an options flow in progress.
-
delete_areaDestructiveDelete an area by its area_id.
-
delete_automationDestructiveDelete an automation by id. Auto-reloads automations afterwards.
-
delete_backupDestructiveDelete a backup by slug.
-
delete_blueprintDestructiveDelete an installed blueprint by its relative path (e.g. 'author/blueprint_name.yaml').
-
delete_cardDestructiveDelete a card by id. HA's WS handler returns an empty payload on success.
-
delete_categoryDestructiveDelete a category via WS `config/category_registry/delete`.
-
delete_config_fileDestructiveDelete a config file. Will NOT delete if it has no known safe extension.
-
delete_css_custom_propertyDestructiveDelete a CSS custom property.
-
delete_eventDestructiveDelete a calendar event by its `uid`.
-
delete_labelDestructiveDelete a label via WS `config/label_registry/delete`.
-
delete_mediaDestructiveDelete a file from the Card Builder media directory by its relative path.
-
delete_pipelineDestructiveDelete an Assist pipeline. Cannot delete the preferred pipeline — change preference first.
-
delete_scriptDestructiveDelete a script by id. Auto-reloads scripts afterwards.
-
delete_style_presetDestructiveDelete a style preset.
-
delete_themeDestructiveDelete a theme file from `themes/<name>.yaml`.
-
delete_zoneDestructiveDelete a zone via WS `config/zone/delete` (accepts zone helper id or `zone.<id>`).
-
git_rollback_fileDestructiveRestore a single file to its state at a specific commit (default: last commit = undo changes).
-
git_rollback_to_commitDestructiveHard-reset config to a previous commit. WARNING: all changes after that commit are lost.
-
notify_persistent_dismissDestructiveDismiss a persistent notification by its `notification_id`.
-
notify_persistent_dismiss_allDestructiveDismiss all persistent notifications.
-
remove_deviceDestructiveRemove a device from a specific config entry.
-
remove_energy_sourceDestructiveRemove an energy source identified by its `stat_energy_from` (also strips matching grid `flow_from` entries).
-
remove_integrationDestructiveRemove (uninstall) an integration config entry.
-
remove_itemDestructiveRemove a todo item from a list by its `uid`.
-
restore_backupDestructiveRestore a full backup by slug. DANGEROUS — requires confirm=True.
-
stop_haDestructiveStop Home Assistant. WARNING: requires manual restart.
-
uninstall_addonDestructiveUninstall an add-on. DANGEROUS — requires confirm=True.
-
uninstall_hacs_repositoryDestructiveUninstall a HACS repository by id.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.