High-risk tools in Nodebench
110 of the 824 tools in Nodebench are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
benchmark_modelsExecuteRun the same prompt against multiple LLM providers and compare responses. Returns side-by-side results with latency, token usage, and a summary. Useful for model selection, qual...
-
bootstrap_parallel_agentsExecuteDetect whether a target project repo has parallel agent infrastructure and, if not, scaffold everything needed. Scans for task coordination, role configs, oracle testing, contex...
-
build_banking_packetExecuteBuild a banker-readiness packet from the canonical company packet.
-
build_company_profile_starterExecuteBuild a starter PitchBook/Crunchbase-like company profile.
-
build_founder_operating_modelExecuteBuild the complete founder operating model: execution order, queue topology, packet routing, source trust policy, progression rubric, and benchmark oracles.
-
build_research_digestExecuteGenerate a digest of new (unseen) articles from RSS feeds. Compares against previously seen articles via SQLite. Returns only new items grouped by category. After generating, ar...
-
build_shared_context_subscriptionExecuteBuild the exact pull/subscription manifest an agent client should use to watch a packet or packet scope.
-
build_shared_context_subscription_manifestExecuteBuild a filtered snapshot/events/pull manifest for one peer, packet class, producer, scope, or subject so clients can subscribe to only relevant shared-context updates.
-
build_submission_exportExecuteBuild a generic submission export from the canonical company packet.
-
build_temporal_graphExecuteBuild a temporal relationship graph for an entity.
-
burst_captureExecuteCapture N sequential screenshots at fixed intervals using Playwright.
-
call_driver_toolExecuteInvoke a tool on a connected MCP driver. This proxies the call to the external MCP server (e.g. playwright-mcp or mobile-mcp) and returns the result. Use list_driver_tools to se...
-
call_llmExecuteCall an LLM model directly and get the response with metrics (tokens, latency). Uses available API keys: Gemini → OpenAI → Anthropic. Useful for eval-driven workflows, model com...
-
call_openclaw_skillExecuteRun an OpenClaw skill safely through security checks.
-
call_webmcp_toolExecuteInvoke a WebMCP tool on a connected origin. The tool is executed in the browser page context via page.evaluate(). Args are validated for suspicious patterns and results are scan...
-
capture_surface_statsExecuteCapture Android SurfaceFlinger stats and logcat for jank analysis (Layer 0 only). Returns janky frame counts, missed vsync, slow UI thread metrics, and filtered logcat entries f...
-
capture_ui_screenshotExecuteCapture a screenshot of a URL using headless Playwright. Returns the screenshot as an inline image that multimodal agents can see and evaluate directly. Also captures browser co...
-
compile_decision_packetExecuteCompile entity intelligence into a decision-ready packet.
-
compile_scenariosExecuteGenerate 3-7 future scenario branches for an entity or decision.
-
compile_tension_modelExecuteModel explicit tensions between forces for a decision or entity.
-
compute_ssim_analysisExecuteCompute block-based SSIM analysis on a set of frame images. Uses 8x8 blocks with parallel ProcessPoolExecutor. Returns SSIM scores, adaptive threshold (max(0.70, median - 2*std)...
-
connect_mcp_driverExecuteConnect to an external MCP server and make its tools available through nodebench-mcp. Predefined drivers:
-
connect_openclawExecuteConnect to an OpenClaw agent with a security policy applied.
-
connect_webmcp_originExecuteConnect to a WebMCP-enabled website via Playwright. Navigates to the URL, intercepts navigator.modelContext tool registrations, and makes discovered tools available for invocati...
-
convex_pre_deploy_gateExecuteRun a comprehensive pre-deployment quality gate. Checks: convex/ directory structure, schema.ts validity, deprecated validator usage, auth configuration, recent audit results, a...
-
convex_quality_gateExecuteRun a configurable quality gate across all stored audit results. Like SonarQube
-
delta_self_dogfoodExecuteDogfood NodeBench Delta on itself. Verifies runtime health, setup friction, distribution surfaces, and compounding return loops, then emits a repair-ready delta.market packet.
-
disconnect_driverExecuteDisconnect from an external MCP driver and shut down its child process. Use this to clean up or to reconnect with different settings.
-
disconnect_openclawExecuteDisconnect an OpenClaw session and generate a safety summary.
-
disconnect_webmcp_originExecuteDisconnect from a WebMCP origin and close the browser page. Use this to clean up resources or to reconnect with different settings.
-
dive_auto_discoverExecuteScan the current page DOM and auto-register components in the dive tree. Discovers semantic landmarks (nav, header, footer, forms, modals, tables, sidebars) and counts interacti...
-
dive_fix_verifyExecuteAfter fixing a bug, verify the fix by re-navigating to the affected route, comparing before/after state, and updating the bug status + changelog. This is the core flywheel step:...
-
dive_interaction_testExecuteDefine and track a structured interaction test for a component. Provide preconditions and a sequence of test steps (action, target, expected outcome). The agent executes each st...
-
dive_reexploreExecuteRe-traverse a route after code changes to detect regressions and verify fixes. Compares the current state against previously registered components, bugs, and test results for th...
-
end_openclaw_sessionExecuteEnd an OpenClaw session and generate a safety summary.
-
enforce_merge_gateExecutePre-merge validation combining git state, verification cycles, eval runs, test results, and quality gates. Returns a go/no-go merge decision with detailed check results and bloc...
-
extract_video_framesExecuteRecord screen and extract key frames from an Android device (Layers 1+2). Uses adb screenrecord then ffmpeg scene-filtered JPEG extraction. CRITICAL: uses -pix_fmt yuvj420p for ...
-
founder_local_weekly_resetExecuteOne-call convenience: gathers all local context and produces a complete
-
get_path_replayExecuteReplay a session
-
gtm_script_builderExecuteBuild a starter GTM script for the current founder wedge.
-
invoke_openclaw_skillExecuteRun an OpenClaw tool safely through security checks.
-
invoke_view_toolExecuteInvoke a per-view tool on the current or specified view.
-
judge_request_retryExecuteRequest a retry, re-plan, escalation, or stop for a failed subtask.
-
judge_tool_outputExecuteRun the 7-criterion LLM judge on a tool
-
load_toolsetExecuteDynamically load a toolset into the current session. After loading, the tools become immediately available for use. Based on the
-
log_interactionExecuteLog and optionally auto-execute an interaction step. If the built-in Playwright browser is active (launched by start_ui_dive), the action is automatically executed in the browse...
-
manipulate_screenshotExecuteManipulate a screenshot using sharp (image processing). Supports crop (extract a region), resize, and annotate (draw colored rectangles and labels to highlight areas). Use after...
-
navigate_to_viewExecuteNavigate to a specific view in the NodeBench AI frontend.
-
nb_start_agentExecuteStart a new agent conversation with an optional initial message.
-
nb_switch_research_tabExecuteSwitch the research hub tab.
-
nodebench_ask_agentExecuteSend a question to the NodeBench AI agent. Returns a structured response with reasoning and sources.
-
nodebench_navigateExecuteNavigate to a specific view. Returns the target view
-
nodebench.claims.verifyExecuteRe-run deterministic public/private boundary and source-evidence verification for a stored public claim.
-
nodebench.research_roleExecuteRun or reuse public role research, store public hiring or market claims, and return a compact role dossier.
-
nodebench.research_runExecuteRun adaptive, evidence-backed research across one or more subjects. Automatically resolves entities, infers scenario facets, selects relevant research angles, reuses precomputed...
-
open_dive_dashboardExecuteOpen the NodeBench UI Dive dashboard in a browser. Shows the full flywheel cycle:
-
open_local_dashboardExecuteStart the local Daily Brief dashboard server if needed, and return the URL. The dashboard shows Brief metrics, Narrative thread lanes, and Ops status — all from local SQLite.
-
project_financialsExecuteBuild 5-year financial projections based on historical data and industry assumptions. Projects: - Revenue with declining growth rates - Operating expenses (gross margin, SG&A, ...
-
readiness_scanExecuteRun a founder readiness scan against the progression and diligence model.
-
render_flow_visualizationExecuteRender flow visualization with colored bounding boxes for each flow group. Supports overlay on a rendered page image or synthetic dark canvas fallback. Handles wide Figma pages ...
-
request_execution_approvalExecuteRequest a human approval gate for a risky execution-trace action. Approval state is written onto the live run so the UI and ledger can show the pending handoff.
-
run_autonomous_loopExecuteExecute autonomous verification loop with stop conditions. Implements Ralph Wiggum pattern with checkpoints, iteration limits, and timeout. Use for multi-step autonomous tasks t...
-
run_benchmark_batchExecuteRun a longitudinal benchmark batch. N=1 is a smoke test (1 founder, 1 session).
-
run_browserstack_benchmark_laneExecuteReturn a BrowserStack/browser-automation benchmark lane payload.
-
run_closed_loopExecuteTrack a compile-lint-test-debug closed loop iteration. Record the result of each step. Never present changes without a full green loop.
-
run_code_analysisExecuteStatic analysis on code or text content for security issues, secrets, homograph attacks, ANSI injections, suspicious URLs, and code quality. Returns structured findings with sev...
-
run_competitor_signal_benchmarkExecuteReturn a competitor-signal-to-response benchmark lane payload.
-
run_deep_simExecuteRun a multi-agent scenario simulation with bounded branching and budget controls. Instantiates agents with personas and incentives, varies conditions across branches, and genera...
-
run_dogfood_batch_with_judgeExecuteExecute the priority 3 dogfood scenarios with automatic LLM judge validation.
-
run_entity_intelligence_missionExecuteRun a full DeepTrace entity intelligence mission with optional bounded research cell. Unifies relationship mapping, ownership, supply chain, signals, and causal analysis. Pass r...
-
run_flicker_detectionExecuteRun full 4-layer Android UI flicker detection pipeline: SurfaceFlinger stats + logcat (L0), screenrecord (L1), frame extraction + SSIM analysis with adaptive threshold (L2), opt...
-
run_founder_autonomy_benchmarkExecuteRun the weekly founder reset autonomy benchmark lane.
-
run_graphifyExecuteGenerate a knowledge graph from a folder of code, docs, papers, or images.
-
run_judge_loopExecuteExecute a full judge-fix-verify loop: calls a tool, judges the output, and if it fails,
-
run_mandatory_flywheelExecuteEnforce the mandatory 6-step AI Flywheel verification after any non-trivial change. All 6 steps must pass before work is considered done. Skipping is only allowed for trivial ch...
-
run_oracle_comparisonExecuteCompare actual output against a known-good oracle reference. Based on Anthropic\
-
run_packet_to_implementation_benchmarkExecuteReturn a packet-to-implementation benchmark lane payload.
-
run_quality_gateExecuteEvaluate content or code against a set of boolean rules. Returns pass/fail with specific failures listed. The agent evaluates each rule and passes boolean results — the tool per...
-
run_reconExecuteStart a reconnaissance research session. Use this at the start of Phase 1 (Context Gathering) to organize research into external sources (SDKs, APIs, blogs) AND internal context...
-
run_research_cellExecuteRun a bounded re-analysis cell for a DeepTrace entity investigation. Queries existing DeepTrace state through parallel branches (evidence gap analysis, counter-hypothesis, dimen...
-
run_self_directed_delivery_loopExecuteRun a local-first autonomous delivery loop across exploratory research, planning, implementation commands, dogfood, verification, and judge. Persists one durable run in SQLite a...
-
run_self_healExecuteAutonomous self-healing for detected drift issues. Fixes orphaned verification cycles
-
run_self_maintenanceExecuteRun autonomous self-maintenance cycle. Checks TypeScript compilation, documentation sync, tool counts, test coverage, and more. Can auto-fix low-risk issues. Scope: quick (1hr c...
-
run_signal_sweepExecuteRun a live signal sweep across all data sources (HackerNews, GitHub Trending, Yahoo Finance, ProductHunt). Returns signals sorted by relevance with severity tiers (FLASH/PRIORIT...
-
run_sync_bridge_flushExecuteOpen the outbound websocket bridge, pair or resume the local device, and flush pending approved operations to the paired web account.
-
run_tests_cliExecuteExecute a shell test command with timeout, capture stdout/stderr, and return structured results. Useful for running test suites, linters, or build commands as part of verificati...
-
run_visual_qa_suiteExecuteEnd-to-end visual QA pipeline: burst capture → SSIM stability analysis →
-
runNewsroomPipelineExecuteTrigger the full DRANE newsroom pipeline (Scout > Historian > Analyst > Publisher) for a given topic or entity. Returns the generated narrative analysis.
-
runSpotFixScanExecuteScan for common operational issues: stale missions, blocked tasks with met deps, old sniff checks.
-
sandbox_batchExecuteExecute multiple commands, index all outputs, and run multiple search queries — all in ONE call. This is the highest-efficiency tool: one sandbox_batch replaces N sandbox_execut...
-
sandbox_executeExecuteRun a shell command, automatically index the output into the sandbox, and return only a summary. The raw stdout/stderr stays in SQLite — only line counts and a preview enter con...
-
scrapling_crawlExecuteStart a multi-page spider crawl with extraction. Crawls from start URLs, follows links matching a CSS selector, extracts data per page. Returns a session_id to poll with scrapli...
-
scrapling_crawl_stopExecuteStop a running crawl session. Pass the session_id from scrapling_crawl. Items collected so far are preserved. Use when you have enough data or need to abort. Requires Scrapling ...
-
self_implementExecuteSelf-implement missing agent infrastructure. Generates implementation plan and code templates for: agent_loop, telemetry, evaluation, verification, multi_channel, self_learning,...
-
simulate_decision_pathsExecuteRun Monte Carlo simulation for founder decisions. Generates multiple random paths to visualize possible future outcomes. Shows average payoff, success/failure rates, best/worst ...
-
smart_select_toolsExecuteLLM-powered tool selection: sends your task description + a compact tool catalog to a fast model (Gemini 3 Flash, GPT-5-mini, or Claude Haiku 4.5) to pick the best 5-10 tools. M...
-
spawn_openclaw_agentExecuteStart a secure OpenClaw session with safety rules applied.
-
start_autonomy_benchmarkExecuteStart an autonomous capability benchmark. Defines a complex build challenge and tracks agent progress through milestones. Inspired by Anthropic\
-
start_dogfood_sessionExecuteStart a new dogfood session for one of the 3 canonical loops (weekly_reset, pre_delegation, company_search). Returns sessionId for subsequent recording.
-
start_eval_runExecuteStart a new eval run. Define the test batch upfront with test cases (input, intent, expected behavior), then record results as each case is executed. Rule: no change ships witho...
-
start_execution_runExecuteStart a live Convex-backed execution trace run for a workflow. Creates a task session and trace together so later steps, decisions, evidence, verifications, and approvals all la...
-
start_ui_diveExecuteInitialize a UI/UX Full Dive session. Auto-launches a headless Playwright browser if installed (zero setup). Navigates to the app URL and optionally auto-discovers page componen...
-
start_verification_cycleExecuteStart a new 6-phase verification cycle for a non-trivial implementation. Returns the cycle ID and Phase 1 instructions. Call this before declaring any integration, migration, or...
-
switchTabExecuteSwitch between research hub tabs
-
thompson_pipelineExecuteEnd-to-end Thompson Protocol pipeline orchestrator. Takes a complex topic and runs it through all 4 agents (Writer → Feynman Editor → Visual Mapper → Anti-Elitism Linter) with q...
-
transcribe_audio_fileExecuteTranscribe a local audio file (MP3/WAV/etc) to text using faster-whisper via Python. Deterministic, no network.
-
trigger_batch_runExecuteRun a scheduled task right now instead of waiting.
-
trigger_investigationExecuteWhen an eval run shows regression, trigger a new verification cycle to investigate. This is how the outer loop feeds the inner loop: regressions trigger 6-phase investigations.
-
triple_verifyExecuteRun triple verification on agent implementation. V1: Internal codebase analysis. V2: External authoritative source validation (Anthropic, OpenAI, LangChain, etc.). V3: Synthesis...
-
validate_agent_compatibilityExecuteRun the agent validation harness — simulates how AI agents (Claude Code,
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.