High-risk tools in Make

High severity Make MCP Server 100 of 202 tools

100 of the 202 tools in Make are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

conda Execute

Runs conda commands (list, info, env-list, create, remove, update) and returns structured JSON output.
mod-tidy Execute

Runs go mod tidy to add missing and remove unused module dependencies.
bazel Execute

Bazel build system operations: build, test, query, info, run, clean, fetch.
build Execute

Runs a build command and returns structured success/failure with errors and warnings.
cmake Execute

CMake build system operations: configure, build, test, list-presets, install, clean.
compose-build Execute

Builds Docker Compose service images and returns structured per-service build status.
exec Execute

Executes arbitrary commands inside a running Docker container and returns structured output. WARNING: may execute untrusted code.
gradle-build Execute

Runs
lerna Execute

Runs Lerna monorepo commands (list, run, changed, version) and returns structured package information.
maven-build Execute

Runs
rsync Execute

Syncs files between local and remote locations using rsync. WARNING: Defaults to dry-run mode for safety — set dryRun=false to actually transfer files. Returns structured transf...
run Execute

Runs a script or file with
run-rerun Execute

Re-runs a workflow run by ID. Optionally re-runs only failed jobs or a specific job. Returns structured result with run ID, status, and URL.
ssh-run Execute

Executes a command on a remote host via SSH. WARNING: This runs commands on a remote machine. Ensure the host and command are correct before executing. Returns structured output...
uv-run Execute

Runs a command in a uv-managed environment and returns structured output.
vite-build Execute

Runs Vite production build and returns structured output files with sizes.
webpack Execute

Runs webpack build with JSON stats output and returns structured assets, errors, and warnings.
ansible-galaxy Execute

Installs or lists Ansible collections and roles from Galaxy or a requirements file.
ansible-playbook Execute

Runs an Ansible playbook and returns structured play recap with per-host results.
api Execute

Makes arbitrary GitHub API calls via
audit Execute

Runs cargo audit and returns structured vulnerability data.
biome-check Execute

Runs Biome check (lint + format) and returns structured diagnostics (file, line, rule, severity, message).
bisect Execute

Binary search for the commit that introduced a bug. Returns structured data with action taken, current commit, remaining steps estimate, and result.
black Execute

Runs Black code formatter and returns structured results (files changed, unchanged, would reformat).
bundle-exec Execute

Executes a command in the context of the Gemfile bundle using
check Execute

Runs cargo check (type check without full build) and returns structured diagnostics. Faster than build for error checking.
cherry-pick Execute

Applies specific commits to the current branch. Returns structured data with applied commits, any conflicts, and new commit hash.
clippy Execute

Runs cargo clippy and returns structured lint diagnostics.
compose-up Execute

Starts Docker Compose services and returns structured status.
coverage Execute

Runs tests with coverage and returns structured coverage summary per file.
develop Execute

Enters or queries a Nix dev shell. When a command is provided, runs it inside the dev shell and returns the result.
doc Execute

Generates Rust documentation and returns structured output with warning count.
esbuild Execute

Runs the esbuild bundler and returns structured errors, warnings, and output files.
flake-check Execute

Checks a Nix flake for errors and returns structured check results, warnings, and errors.
fmt Execute

Checks or fixes Rust formatting and returns structured output.
get Execute

Downloads and installs Go packages and their dependencies.
gitleaks Execute

Runs Gitleaks to detect hardcoded secrets in git repositories. Returns structured finding data with redacted secrets.
golangci-lint Execute

Runs golangci-lint and returns structured lint diagnostics (file, line, linter, severity, message).
gradle-test Execute

Runs
hadolint Execute

Runs Hadolint (Dockerfile linter) and returns structured diagnostics (file, line, rule, severity, message).
info Execute

Runs
init Execute

Initializes a Terraform working directory. Downloads providers, configures backend, and prepares for plan/apply.
jq Execute

Processes and transforms JSON using jq expressions. Accepts JSON from a file path or inline string. Returns the transformed result.
lint Execute

Runs
maven-test Execute

Runs
maven-verify Execute

Runs
mongosh-eval Execute

Evaluates a MongoDB expression via mongosh and returns the output.
mypy Execute

Runs mypy and returns structured type-check diagnostics (file, line, severity, message, code).
mysql-query Execute

Executes a MySQL query and returns structured tabular output.
nvm Execute

Manages Node.js versions via nvm.
nx Execute

Runs Nx workspace commands and returns structured per-project task results with cache status.
outdated Execute

Runs
oxlint Execute

Runs Oxlint and returns structured diagnostics (file, line, column, rule, severity, message).
pip-audit Execute

Runs pip-audit and returns a structured vulnerability report.
playwright Execute

Runs Playwright tests with JSON reporter and returns structured results with pass/fail status, duration, and error messages.
pm-ls Execute

Runs
poetry Execute

Runs Poetry commands and returns structured output.
psql-query Execute

Executes a PostgreSQL query via psql and returns structured tabular output.
pull Execute

Pulls a Docker image from a registry and returns structured result with digest info.
pyenv Execute

Manages Python versions via pyenv.
pytest Execute

Runs pytest and returns structured test results (passed, failed, errors, skipped, failures).
rebase Execute

Rebases the current branch onto a target branch. Supports abort, continue, skip, and quit for conflict resolution. Returns structured data with success status, branch info, conf...
redis-command Execute

Executes a Redis command via redis-cli and returns the response.
redis-ping Execute

Tests Redis connectivity by sending a PING command.
reload Execute

Rebuilds the MCP server (or a specified project) and sends a
repo-clone Execute

Clones a GitHub repository. Returns structured data with success status, repo name, target directory, and message.
request Execute

Makes an HTTP request via curl and returns structured response data (status, headers, body, timing).
rollup Execute

Runs Rollup bundler and returns structured bundle output with errors and warnings.
ruff-check Execute

Runs ruff check and returns structured lint diagnostics (file, line, code, message).
ruff-format Execute

Runs ruff format and returns structured results (files changed, file list).
semgrep Execute

Runs Semgrep static analysis with structured rules and findings. Returns structured finding data with severity summary.
shell Execute

Makes packages available in the environment and optionally runs a command. Returns stdout, stderr, exit code, and duration.
shellcheck Execute

Runs ShellCheck (shell script linter) and returns structured diagnostics (file, line, column, rule, severity, message).
ssh-test Execute

Tests SSH connectivity to a remote host using
stylelint Execute

Runs Stylelint and returns structured diagnostics (file, line, column, rule, severity, message).
task Execute

Runs a named task from deno.json via
test Execute

Runs
trivy Execute

Runs Trivy vulnerability/misconfiguration scanner on container images, filesystems, or IaC configs. Returns structured vulnerability data with severity summary.
tsc Execute

Runs the TypeScript compiler and returns structured diagnostics (file, line, column, code, message).
turbo Execute

Runs Turborepo tasks and returns structured per-package results with cache hit/miss info.
vet Execute

Runs go vet and returns structured static analysis diagnostics with analyzer names. Uses -json flag for native JSON output with automatic text fallback.
yq Execute

Processes and transforms YAML, JSON, XML, TOML, and properties files using yq expressions. Accepts input from a file path or inline string. Returns the transformed result.
add Execute

Runs
add-package Execute

Runs dotnet add package to add a NuGet package and returns structured results. WARNING: may execute untrusted code.
apply Execute

Applies a Kubernetes manifest file.
bundle-install Execute

Installs Gemfile dependencies using
gem-install Execute

Installs a Ruby gem using
generate Execute

Runs go generate directives in Go source files. WARNING: may execute untrusted code.
helm Execute

Manages Helm releases (install, upgrade, list, status, history, template). Returns structured JSON output.
install Execute

Runs
merge Execute

Merges a branch into the current branch. Supports abort, continue, and quit actions. Returns structured data with merge status, fast-forward detection, conflicts, and commit hash.
package-resolve Execute

Resolves Swift package dependencies and returns structured resolution results.
package-update Execute

Updates Swift package dependencies and returns structured update results.
pip-install Execute

Runs pip install and returns a structured summary of installed packages. WARNING: may execute untrusted code.
post Execute

Makes an HTTP POST request via curl and returns structured response data. Convenience wrapper for the request tool with required body.
publish Execute

Runs dotnet publish for deployment and returns structured output with output path and diagnostics.
push Execute

Pushes commits to a remote repository. Returns structured data with success status, remote, branch, summary, and whether the remote branch was newly created.
restore Execute

Runs dotnet restore to restore NuGet dependencies and returns structured results.
submodule Execute

Manages git submodules. Supports list (default), add, update, sync, and deinit actions. List returns structured submodule data with path, SHA, branch, and status.
uv-install Execute

Runs uv pip install and returns a structured summary of installed packages. WARNING: may execute untrusted code.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Make

Tools at high risk

Attacks that target this class

More on Make

Enforce policy on every Make tool call.