High-risk tools in GitHub

High severity GitHub MCP Server 7 of 245 tools

7 of the 245 tools in GitHub are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

actions_run_trigger Execute

Trigger GitHub Actions workflow actions
detach Execute

Create a detached HEAD worktree (optional, default: false) (boolean, optional)
git_checkout Execute

Git checkout
git_pull Execute

Git pull
git_push Execute

Git push
git_worktree_add Execute

Git worktree add
git_worktree_lock Execute

Git worktree lock

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in GitHub

Tools at high risk

Attacks that target this class

More on GitHub

Enforce policy on every GitHub tool call.