Critical-risk tools in Dida
4 of the 18 tools in Dida are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
batch-delete-tasksDestructivePermanently removes multiple tasks from TickTick in a single operation. This batch operation is more efficient than deleting tasks individually. You must provide an array of tas...
-
complete-taskDestructiveMarks a task as completed in TickTick. This tool automatically finds the project containing the task, so you only need to provide the task ID. The task will be moved to the comp...
-
delete-projectDestructiveDelete a project
-
delete-taskDestructivePermanently removes a task from TickTick. You must provide both the task ID and the project ID. This action cannot be undone, and all task data including content, due dates, and...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.