Critical-risk tools in GoCreative Agent API
7 of the 172 tools in GoCreative Agent API are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
ai_askFinancialLLM completion (standard tier, DeepSeek V3.1) — send any prompt, get a frontier-quality answer. Pay USDC per call, no API key. Outsource summarization, extraction, classificatio...
-
enrich_browserbaseFinancialHeadless-browser fetch of a URL with full JS render, returning final HTML and screenshot URL. Use when the target page is SPA/JS-rendered and a plain fetch returns empty HTML. ...
-
lookup_credit_card_validateFinancialLuhn-validate a credit-card number and detect the network. Pass ?number=... as query. Use for fintech UX agents (NOT a fraud check). Example call: {"query_string": "number=4111...
-
lookup_lighthouseFinancialRun a Lighthouse audit on a URL (performance, accessibility, SEO, best-practices). Use for web-quality agents. Example call: {"url": "https://example.com"} Cost: $0.005–$0.05 ...
-
lookup_qr_codeFinancialGenerate a QR code data URL for arbitrary text. Pass ?text=... as query. Use for print, signage, ticketing agents. Example call: {"query_string": "text=https://api.gocreativeai...
-
lookup_uuidFinancialGenerate v4 UUIDs. Pass ?count=N as query. Use for ID-generation agents. Example call: {"query_string": "count=5"} Cost: $0.005–$0.05 USDC on Base per call.
-
scrape_firefoxstoreFinancialScrape Firefox Add-ons (users, rating, version). Use for browser-extension research. Example call: {"addon_slug": "ublock-origin"} Cost: $0.005–$0.05 USDC on Base per call.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.