High-risk tools in Nostr Bray
13 of the 240 tools in Nostr Bray are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
cast-spellExecuteExecute a NIP-A7 Spell (kind 777). Fetches the Spell event, resolves runtime variables ($me → your pubkey, $contacts → your follow list) and relative timestamps (e.g.
-
execute-actionExecuteExecute an action found via search-actions. Pass the exact action name and its parameters.
-
identity-restore-shamirExecuteReconstruct a secret from Shamir shard files. Returns the restored npub for verification.
-
identity-switchExecuteSwitch the active Nostr identity. ALL subsequent tool calls will sign events and query relays as the new identity. Pass
-
marketplace-probeExecuteSend an HTTP request to an endpoint and inspect the response.
-
nip44-encryptExecuteEncrypt a plaintext string using NIP-44 for a recipient pubkey. Uses the active identity\
-
onboard-verifiedExecuteGuided workflow to build a verified trust profile. Shows your current Signet tier, what steps remain (self-declaration, vouches, professional verification, vault setup), and lis...
-
relay-authExecuteAuthenticate to a relay that requires NIP-42 AUTH. Connects to the relay, waits for an AUTH challenge, signs a kind 22242 event, and sends it back. Returns { authenticated: true...
-
trust-attest-chainExecuteFollow endorsement references to build a transitive trust chain. Starting from a subject, queries attestations about that subject, then follows each attestor as a new subject up...
-
trust-ring-lsag-signExecuteCreate an LSAG (Linkable SAG) signature with a key image tied to an election ID. If the same signer signs twice in the same election, the duplicate key image reveals double-acti...
-
trust-ring-proveExecuteCreate a ring signature proving anonymous group membership. A verifier can confirm
-
trust-spoken-verifyExecuteVerify a spoken token response against the shared secret.
-
vault-encryptExecuteEncrypt content using a content key derived from the active identity for a given tier and epoch. No network access — purely local cryptography. Returns the ciphertext, tier, and...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.