High-risk tools in Tanod
20 of the 308 tools in Tanod are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
build_ics_eventExecuteutilpeek: Build an iCalendar file from JSON events. To read an .ics file use parse_ics. Returns RFC 5545 VCALENDAR text built from 1-50 events, CRLF lines folded at 75 octets an...
-
build_pptx_deckExecutepdfpeek: Generate a PowerPoint deck from JSON slides: titles, bullets, speaker notes. For a workbook use build_xlsx_workbook; for a Word file use fill_docx_template. Returns the...
-
build_xlsx_workbookExecutepdfpeek: Build a styled Excel workbook from JSON sheets, columns and rows. To read a workbook back use convert_excel_to_json; for slides use build_pptx_deck. Rows are arrays or ...
-
bulk_agent_indexExecuteagentscan: Price: USD 2; no free tier; per-IP daily cap. For a filtered slice use export_agent_index; to refresh an existing copy use agent_index_delta. Download the current sna...
-
cron_next_runsExecuteutilpeek: the next run times of a cron expression. For iCalendar RRULEs use expand_rrule. Standard 5-field cron (minute hour day-of-month month day-of-week) or a macro (@daily, ...
-
decode_calldataExecutechainpeek: decode EVM transaction calldata. To run a read call use eth_call; to fetch a transaction use get_transaction. Input: `calldata` and optional `signature`; with no sign...
-
expand_rruleExecuteutilpeek: Expand an iCalendar RRULE into dates. For cron use cron_next_runs; to build an event use build_ics_event. Returns an RFC 5545 RRULE and a start expanded into its occur...
-
html_to_pdfExecutepdfpeek: Convert a web page URL to PDF. For images use images_to_pdf; for an image capture use take_website_screenshot. Returns a public web page printed to PDF in a sandboxed h...
-
image_cropExecuteimagepeek: Crop an image to a box or an aspect ratio. To scale instead use image_resize. Returns the image cropped to a box (`left`, `top`, `width`, `height`; out of bounds is a...
-
parse_icsExecuteutilpeek: Parse an iCalendar file into JSON events. To write one use build_ics_event. Returns iCalendar text (Google, Outlook, Apple, up to 1 MB) unfolded and read into events. ...
-
parse_phone_numberExecuteutilpeek: parse and format a phone number. For a prefix's country and network use lookup_phone_prefix. A string that is not a phone number, or a national form without region, is...
-
parse_rss_feedExecuteutilpeek: Parse an RSS or Atom feed URL into clean JSON: feed data, items, dates, audio enclosures. To find a podcast's feed use search_podcasts. Returns a public RSS, Atom or R...
-
parse_sitemapExecutesitepeek: parse a sitemap into its URLs. For crawl permission use check_robots_txt. An index is followed one level: its first 5 child sitemaps are fetched, the rest listed. File...
-
parse_urlExecuteutilpeek: parse a URL. To fetch the page use render_page. The URL is parsed, never fetched. Public-suffix split from the Public Suffix List snapshot bundled with the parser (dat...
-
parse_user_agentExecuteutilpeek: parse a User-Agent string. For known x402 monitors and indexers with call rates use identify_x402_client. A User-Agent is self-reported and easy to fake; `is_bot` is a...
-
render_mermaidExecutepdfpeek: Render Mermaid diagram code to an SVG or PNG image. Returns Mermaid diagram code drawn as an SVG or PNG file in an offline sandboxed browser: `format` svg | png, `theme...
-
satellite_passesExecuteskypeek: Predict satellite passes over a location. For sun and moon times use sun_moon_times. Returns the passes of a satellite (default the ISS) over a point in the next 1-3 da...
-
sec_financialsExecuteutilpeek: Get a US company's reported financials per fiscal year or quarter from SEC EDGAR. For the registrant and filings use sec_company_lookup. Returns a US SEC registrant's ...
-
transcribe_audioExecutemlpeek: Speech to text and subtitles: transcribe audio to text, timed segments, SRT and WebVTT. For a podcast episode use transcribe_podcast_episode; to translate use translate_...
-
x402_well_known_fileExecuteagentscan: Build an x402 seller's /.well-known/x402 file from its Bazaar listings. Returns the /.well-known/x402 file body for one seller host, built from its current Bazaar and...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.