High-risk tools in Gala
10 of the 324 tools in Gala are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
gala_launchpad_buyExecuteExecute token purchase with slippage protection. WORKFLOW: 1. calculateBuyAmount() -> Get expected output (result.amount) 2. buy() -> Execute trade with expectedAmount (buys pa...
-
gala_launchpad_emit_stream_countdownExecuteEmit a stream countdown event. Notifies all subscribers of a token when the next live stream will start. Perfect for building anticipation and getting viewers ready for a sched...
-
gala_launchpad_execute_swapExecuteExecute a GSwap trade through gswap-sdk (gSwap.swaps.swap) and return its confirmation result.
-
gala_launchpad_global_feed_referenceExecuteReference: Subscribe to the global feed for real-time updates. **IMPORTANT**: The global feed is a CLIENT-SIDE feature that requires the SDK to be initialized with WebSocket su...
-
gala_launchpad_launch_tokenExecuteCreate a new token on the launchpad. WORKFLOW: 1. checkTokenName() → Verify name is available 2. checkTokenSymbol() → Verify symbol is available 3. launchToken() → Create token...
-
gala_launchpad_sellExecuteExecute token sale with slippage protection. WORKFLOW: 1. calculateSellAmount() -> Get expected output (result.amount and result.reverseBondingCurveFee) 2. sell() -> Execute tr...
-
gala_launchpad_site_config_state_referenceExecuteReference: Access site configuration state from global feed. **IMPORTANT**: The global feed is a CLIENT-SIDE feature in the SDK. This tool provides documentation. Config access...
-
gala_launchpad_start_streamExecuteStart a live stream for a token. Creates a new stream session and returns streaming credentials. rtmpsUrl is the full RTMPS ingest URL; srtUrl is the full SRT ingest URL. Use s...
-
gala_launchpad_stop_streamExecuteStop a live stream for a token. Ends the current stream session. The stream key remains valid for future streams. RETURNS: { success: true } Authentication: Requires wallet s...
-
gala_launchpad_trigger_ai_moderationExecuteTrigger AI moderation for a content flag. Queues flagged content for AI moderation. Moderation runs asynchronously - use gala_launchpad_get_ai_moderation_result to poll for res...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.