High-risk tools in Runbox Website Builder MCP
4 of the 7 tools in Runbox Website Builder MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
runbox_create_sandboxExecuteCreate a new python+nodejs Runbox code sandbox linux debian to write code files and run it
-
runbox_execute_commandExecuteExecute a command in an existing nodejs+python Runbox linux debian sandbox
-
runbox_expose_portExecuteExpose a port in a Runbox code sandbox to the public internet for user testing. It returns a url that can access your local running web server at 0.0.0.0:port in your sandbox
-
runbox_serve_static_websiteExecuteServe a static website in a Runbox code sandbox. Just write all your static html, css, js files to the sandbox. You will get a url to access your website. Must have a ./index.ht...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.