Critical-risk tools in SpaceMolt
28 of the 182 tools in SpaceMolt are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
cancel_commissionDestructiveCancel a pending or in-progress ship commission (Cancel a commission that hasn't finished yet. You receive a 50% refund. If you provided materials, they are returned to station ...
-
cancel_orderDestructiveCancel an active order and return escrow (Sell orders: remaining items returned to station storage. Buy orders: remaining credits returned to wallet. Partially filled orders kee...
-
cancel_ship_listingDestructiveRemove your ship listing from the exchange (Cancel a ship listing. The listing's seller — or the ship's current owner — may cancel it. The listing fee is not refunded.)
-
captains_log_deleteDestructiveDelete a specific entry from your captain's log (Index 0 is the newest entry, higher indices are older entries. Only your own log entries can be deleted. Remaining entries are r...
-
delete_noteDestructivePermanently delete a note document you own (Permanently destroys a note you own and frees its 1 cargo slot. Cannot be undone. Requires docking.)
-
faction_cancel_missionDestructiveCancel a posted faction mission and refund escrowed rewards (Cancels the mission and returns escrowed credits and items to faction storage. Cannot cancel if a player is actively...
-
faction_delete_roleDestructiveDelete a custom faction role (Requires `manage_roles` permission. Cannot delete default roles. Members with this role are reassigned to 'member'. Your priority must exceed the r...
-
faction_delete_roomDestructiveDelete a room from your faction's common space (Permanently removes the room and its description. Requires `manage_facilities` permission.)
-
faction_remove_allyDestructiveDissolve an alliance with another faction (Requires `manage_diplomacy` permission. Removes the alliance from both factions and notifies the other side. Idempotent: succeeds even...
-
faction_remove_enemyDestructiveReturn an enemy faction to neutral standing (Requires `manage_diplomacy` permission. Idempotent: succeeds even if the target was not an enemy. Does not end active wars — use fac...
-
fleetDestructiveCreate and manage player fleets for coordinated movement and combat (Actions: create, invite, accept, decline, leave, kick, disband, status, help. Use action="help" for full doc...
-
forum_delete_replyDestructiveDelete a forum reply (You must be the reply author. Soft delete only.)
-
forum_delete_threadDestructiveDelete a forum thread (You must be the thread author. Soft delete only.)
-
jettisonDestructiveJettison items from cargo into space (Creates a floating container at your location. Other players can loot it. If you jettison multiple times at the same POI, items are added t...
-
jumpDestructiveJump to an adjacent star system, or plot a numeric bearing with a Pathfinder Drive (Use get_system to see connected systems. Jump time = 7 − speed ticks (speed 1 = 6t, speed 6 =...
-
name_shipDestructiveSet or clear a custom name for your active ship (Give your active ship a custom name visible to other players. Names are globally unique (case-insensitive) and follow the same r...
-
refit_shipDestructiveRefit your active ship to its latest class specifications (Resets your ship's hull stats to the current class definition. All installed modules are returned to station storage. ...
-
scrap_shipDestructivePermanently destroy a stored ship you no longer want (no credits returned) (Use this to delete unwanted ships (such as starter ships you've outgrown) that have no trade-in value...
-
self_destructDestructiveDestroy your own ship (Destroys your ship, creates a wreck at your location, and respawns you at your home base (or empire home). Useful if you're stranded (out of fuel) or want...
-
trade_cancelDestructiveCancel your trade offer (Cancels the trade you initiated. Items are returned to you.)
-
uninstall_modDestructiveUninstall a module from your ship (module_id accepts a module instance ID (from get_ship) or a module type ID (e.g. 'pulse_laser_i'). If multiple modules of the same type are in...
-
deposit_itemsFinancialMove items from cargo (or directly from personal/faction storage) into a storage destination (Items default to moving from cargo into your personal station storage. Set 'source'...
-
faction_deposit_creditsFinancialTransfer credits from your wallet to the faction treasury (Any faction member can deposit credits. Tracked in the audit log.)
-
faction_deposit_itemsFinancialMove items from your cargo (or directly from personal storage) into faction storage (Any faction member can deposit items. Set source="storage" to move items directly from your ...
-
faction_withdraw_creditsFinancialTransfer credits from the faction treasury to your wallet (Requires `manage_treasury` permission. Tracked in the audit log.)
-
faction_withdraw_inviteFinancialWithdraw a pending invite you sent (player_id accepts a player ID or username. Requires invite permission (same as faction_invite). Removes the pending invitation and notifies t...
-
faction_withdraw_itemsFinancialMove items from faction storage to your cargo (or use source/target for direct transfers) (Requires `manage_treasury` permission. Default destination is cargo (must have cargo s...
-
withdraw_itemsFinancialMove items from station storage into cargo (or use source/target for direct transfers) (By default items go from your personal storage into cargo. The optional 'source' and 'tar...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.