High-risk tools in Rube
3 of the 11 tools in Rube are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
RUBE_EXECUTE_RECIPEExecute 3/5Executes a Recipe
-
RUBE_MULTI_EXECUTE_TOOLExecute 3/5Fast and parallel tool executor for tools and recipes discovered through RUBE_SEARCH_TOOLS. Use this tool to execute up to 50 tools in parallel across apps. Response contains...
-
RUBE_REMOTE_BASH_TOOLExecute 4/5Execute bash commands in a REMOTE sandbox for file operations, data processing, and system tasks. Essential for handling large tool responses saved to remote files. PRIMARY...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.
More on Rube
Enforce policy on Rube
One command generates a policy scaffold for every server in your MCP config.
npx -y @policylayer/intercept init