Critical-risk tools in Tolpo
16 of the 243 tools in Tolpo are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
automation_deleteDestructiveDelete a local rule and its queued actions.
-
camera_ptz_delete_presetsDestructiveDelete selected saved viewpoints after checking they exist.
-
camera_storage_formatDestructiveFormat a camera's memory card. This deletes every recording on it and cannot be undone. Only do it when
-
camera_system_resetDestructivecamera_system_reset
-
group_deleteDestructiveDelete a local group without changing any device.
-
light_delete_ruleDestructiveDelete one on-device lighting rule by id.
-
pair_removeDestructivepair_remove
-
plug_auto_off_cancelDestructiveCancel a running automatic shut-off. The load may stay on longer. Requires confirmation.
-
plug_energy_clearDestructivePermanently erase stored energy statistics. Requires the confirmation phrase naming this device.
-
plug_rule_deleteDestructiveplug_rule_delete
-
reset_factoryDestructivereset_factory
-
reset_rebootDestructivereset_reboot
-
room_deleteDestructiveDelete a local room without changing any device.
-
vacuum_remove_scheduleDestructiveRemove one schedule. Does not remove all schedules.
-
vacuum_reset_consumableDestructivevacuum_reset_consumable
-
vacuum_return_homeDestructiveSend the robot to its charging dock or cancel its return.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.