Critical-risk tools in Codex Omnifocus

Critical severity Codex Omnifocus MCP Server 2 of 21 tools

2 of the 21 tools in Codex Omnifocus are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at critical risk

batch_remove_items Destructive

Remove multiple tasks or projects from OmniFocus in a single operation. Prefer IDs for destructive batch operations.
remove_item Destructive

Remove a task or project from OmniFocus. Prefer ID over name for destructive operations.

Attacks that target this class

Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Privilege escalation via admin-only tools
Data exfiltration via tool chaining
Runaway Tool Loops

Critical-risk tools in Codex Omnifocus

Tools at critical risk

Attacks that target this class

More on Codex Omnifocus

Enforce policy on every Codex Omnifocus tool call.