Critical-risk tools in Ha Nexus Agent
35 of the 309 tools in Ha Nexus Agent are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
abort_config_flowDestructiveAbort a config flow in progress.
-
abort_options_flowDestructiveAbort an options flow in progress.
-
clean_mqttDestructiveRemove stale MQTT discovery entries for an ESPHome device (MQTT mode only).
-
delete_areaDestructiveDelete an area by its area_id.
-
delete_automationDestructiveDelete an automation by id. Auto-reloads automations afterwards. Set confirm=True to proceed.
-
delete_backupDestructiveDelete a backup by slug.
-
delete_blueprintDestructiveDelete an installed blueprint by its relative path (e.g. 'author/blueprint_name.yaml').
-
delete_cardDestructiveDelete a card by id. HA's WS handler returns an empty payload on success.
-
delete_categoryDestructiveDelete a category via WS `config/category_registry/delete`.
-
delete_config_fileDestructiveDelete a config file. Will NOT delete if it has no known safe extension.
-
delete_css_custom_propertyDestructiveDelete a CSS custom property.
-
delete_eventDestructiveDelete a calendar event by its `uid`.
-
delete_labelDestructiveDelete a label via WS `config/label_registry/delete`.
-
delete_mediaDestructiveDelete a file from the Card Builder media directory by its relative path.
-
delete_pipelineDestructiveDelete an Assist pipeline. Cannot delete the preferred pipeline — change preference first.
-
delete_sceneDestructiveDelete a scene config. Requires confirm=True. Auto-reloads scenes.
-
delete_scriptDestructiveDelete a script by id. Auto-reloads scripts afterwards. Set confirm=True to proceed.
-
delete_style_presetDestructiveDelete a style preset.
-
delete_themeDestructiveDelete a theme file from `themes/<name>.yaml`.
-
delete_zoneDestructiveDelete a zone via WS `config/zone/delete` (accepts zone helper id or `zone.<id>`).
-
git_rollback_fileDestructiveRestore a single file to its state at a specific commit (default: HEAD = undo uncommitted changes).
-
git_rollback_to_commitDestructiveHard-reset config to a previous commit. WARNING: ALL changes after that commit are permanently lost.
-
lvgl_delete_widgetDestructiveDelete an LVGL widget by id from a page on an ESPHome device and save the config.
-
notify_persistent_dismissDestructiveDismiss a persistent notification by its `notification_id`.
-
notify_persistent_dismiss_allDestructiveDismiss all persistent notifications.
-
remove_dashboard_resourceDestructiveRemove a Lovelace resource by its numeric ID. Set confirm=True to proceed.
-
remove_deviceDestructiveRemove a device from a specific config entry.
-
remove_energy_sourceDestructiveRemove an energy source identified by its `stat_energy_from` (also strips matching grid `flow_from` entries).
-
remove_groupDestructiveRemove a Home Assistant entity group. Set confirm=True to proceed.
-
remove_integrationDestructiveRemove (uninstall) an integration config entry. Set confirm=True to proceed.
-
remove_itemDestructiveRemove a todo item from a list by its `uid`.
-
restore_backupDestructiveRestore a full backup by slug. DANGEROUS — requires confirm=True.
-
stop_haDestructiveStop Home Assistant. WARNING: requires manual restart.
-
uninstall_addonDestructiveUninstall an add-on. DANGEROUS — requires confirm=True.
-
uninstall_hacs_repositoryDestructiveUninstall a HACS repository by id.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.