High-risk tools in UnClick
52 of the 813 tools in UnClick are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
anthropic_create_messageExecuteSend a message to the Anthropic Messages API (Claude models). Useful for agents that need to call Claude programmatically or compare model outputs.
-
bluesky_actionExecutePerform a Bluesky action: bluesky_post, bluesky_read_feed, bluesky_reply, bluesky_like, bluesky_repost, bluesky_search, bluesky_profile, bluesky_follow.
-
circleci_trigger_pipelineExecuteTrigger a new CircleCI pipeline for a project. Optionally specify branch, tag, or parameters.
-
cohere_chatExecuteChat with a Cohere Command model. Supports system preamble and conversation history.
-
cohere_classifyExecuteClassify texts into categories using Cohere Classify with few-shot examples.
-
cohere_generateExecuteGenerate text completions using Cohere Command models.
-
copypass_runExecuteStart a scaffold CopyPass run for AI-generated copy. Chunk 1 stores an in-session run record and echoes operator context so later evidence-led copy checks can plug into a stable...
-
csuite_analyzeExecuteRun a C-Suite multi-perspective analysis on a business scenario.
-
elevenlabs_text_to_speechExecuteConvert text to speech with a selected ElevenLabs voice. Returns base64-encoded audio.
-
fly_create_machineExecuteCreate a new machine in a Fly.io app.
-
groq_chat_completionExecuteRun a fast LLM inference with Groq. Supports Llama 3, Mixtral, Gemma, and other open models at high speed.
-
higgsfield_generate_imageExecuteGenerate an image from a text prompt using Higgsfield AI.
-
higgsfield_generate_videoExecuteGenerate a video from a text prompt using Higgsfield AI. Supports Soul Styles for cinematic looks. Returns a generation_id to poll for completion.
-
igniteonly_apiExecuteRun IgniteOnly💥 on a verified NudgeOnly bridge result or deterministic evidence. Emits a compact public worker wake packet only when safety gates pass.
-
igniteonly_receipt_consumerExecuteConsume a NudgeOnly receipt bridge result and emit a compact IgniteOnly worker wake packet when verified. It never edits code, merges, approves, closes, or marks done.
-
kling_generate_videoExecuteGenerate a high-quality video from text using Kling AI (Kuaishou). Supports standard and professional modes. Returns a task_id to poll for completion.
-
legalpass_runExecutePlan a LegalPass issue-spotting run against a URL, contract upload, or repo. Scaffold-only: exposes LegalPass guardrails and the safe run envelope while full 12-hat execution la...
-
mistral_chat_completionExecuteRun a chat completion with a Mistral AI model (mistral-small, mistral-medium, mistral-large, etc.).
-
mistral_create_embeddingExecuteCreate vector embeddings for text using Mistral's embedding model.
-
neon_execute_sqlExecuteExecute a SQL query against a Neon database endpoint.
-
nudgeonly_apiExecuteRun 👉Nudge, the PinballWake NudgeOnlyAPI worker, through OpenRouter free routing. Use only for painpoint hints and simple-English nudge summaries. It cannot merge, close, appro...
-
openai_chat_completionExecuteRun a chat completion with an OpenAI model (GPT-4o, GPT-4, etc.).
-
openai_create_embeddingExecuteCreate vector embeddings for text using an OpenAI embedding model.
-
openai_generate_imageExecuteGenerate images from a text prompt using DALL-E.
-
perplexity_chat_completionExecuteRun a search-augmented chat completion with Perplexity AI. Returns grounded answers with citations from the web.
-
pika_generate_videoExecuteGenerate a creative AI video from a text prompt using Pika. Optionally animate an input image. Returns a generation_id to poll for completion.
-
postmark_send_emailExecuteSend a transactional email via Postmark. Supports HTML and plain text.
-
pushonly_apiExecuteRun PushOnly📬 on a verified IgniteOnly wake packet. Emits a public worker push envelope for a known worker route only; never builds, merges, assigns, closes, or marks done.
-
qc_check_apiExecuteTest a list of API endpoints and report which ones return the expected HTTP status. Runs each endpoint sequentially.
-
qc_run_checklistExecuteRun a sequential QC checklist against a website URL. Checks site load, SSL, meta tags, og:image, robots.txt, sitemap, console errors, broken links, response time, and copy quali...
-
render_trigger_deployExecuteTrigger a new deploy for a Render service.
-
replicate_cancel_predictionExecuteCancel a running Replicate prediction.
-
replicate_create_predictionExecuteRun a Replicate model by creating a prediction.
-
runway_generate_videoExecuteGenerate a video from text or an image using Runway ML. Supports text-to-video and image-to-video. Returns a task_id to poll for completion.
-
seopass_runExecutePlan a SEOPass run against a URL or registered pack. Chunk 1 returns the crawl and Lighthouse execution plan without persisting results.
-
slack_actionExecutePerform a Slack action: slack_send, slack_read, slack_search, slack_thread_reply, slack_channels, slack_react, slack_upload.
-
stability_text_to_imageExecuteGenerate images from a text prompt using Stability AI.
-
start_crew_runExecuteCall this tool when the user wants to start a Crews Council run. Creates the run row on the UnClick API and returns a ConversationalCard with next actions. LLM turns are expecte...
-
telegram_manage_chatExecuteManage a Telegram chat (get info, ban, kick, etc.).
-
testpass_runExecuteStart a TestPass run against an MCP server. Seeds deterministic and agent checks from the given pack and returns the run id plus an initial verdict summary. Response includes wa...
-
text_transformExecuteTransform text (uppercase, lowercase, title case, slug, etc.).
-
togetherai_chat_completionExecuteRun a chat completion with any Together AI model. Supports Llama, Mistral, Qwen, and 100+ open-source models.
-
togetherai_completionExecuteRun a text completion with any Together AI model.
-
turso_execute_sqlExecuteExecute a SQL query against a Turso edge database.
-
twilio_make_callExecuteInitiate an outbound phone call via Twilio.
-
twilio_send_smsExecuteSend an SMS via Twilio.
-
twilio_send_verifyExecuteSend a verification code via Twilio Verify (SMS, call, email, or WhatsApp).
-
upstash_kafka_produceExecuteProduce messages to an Upstash Kafka topic.
-
urlscan_scanExecuteSubmit a URL for scanning on urlscan.io.
-
uxpass_runExecuteRun a UI/UX quality check synchronously against a URL. Executes the deterministic uxpass-core check set (HTTP, HTML, accessibility, agent readability, performance, security) aga...
-
vercel_create_deploymentExecuteCreate a Vercel deployment. Pass deployment_id to redeploy an existing commit, or project_id + git_ref to deploy fresh from git. Set force_new=true to skip the build cache (need...
-
virustotal_scan_urlExecuteSubmit a URL for scanning on VirusTotal.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.