High-risk tools in UnClick
152 of the 1662 tools in UnClick are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
ackermannExecuteCompute the Ackermann function A(m, n).
-
anthropic_create_messageExecuteSend a message to the Anthropic Messages API (Claude models). Useful for agents that need to call Claude programmatically or compare model outputs.
-
avl_treeExecuteBuild an AVL (self-balancing BST) from a list of keys. Returns inorder traversal, tree height, and optional key search results.
-
baby_giant_stepExecuteSolve the discrete logarithm problem (find x such that base^x = target mod modulus) using baby-step giant-step.
-
bellman_fordExecuteFind shortest paths from a source node using Bellman-Ford (handles negative edge weights).
-
bezier_curveExecuteCompute a Bezier curve from control points with arc length and optional evaluation.
-
bitmask_opsExecuteBitmask operations: info, submasks, supersets, next permutation, enumerate set bits.
-
bitwise_calcExecutePerform bitwise operations (AND, OR, XOR, NOT, NAND, NOR, shifts) on integers.
-
bloom_filterExecuteBuild a Bloom filter from items and test membership of query items (probabilistic, no false negatives).
-
bluesky_actionExecutePerform a Bluesky action: bluesky_post, bluesky_read_feed, bluesky_reply, bluesky_like, bluesky_repost, bluesky_search, bluesky_profile, bluesky_follow.
-
burrows_wheelerExecuteCompute the Burrows-Wheeler Transform (forward or inverse).
-
cartesian_treeExecuteBuild a Cartesian tree from an array (min-heap ordered with BST on indices).
-
chromatic_numberExecuteCompute the exact chromatic number of a graph using inclusion-exclusion (up to 20 vertices).
-
circleci_trigger_pipelineExecuteTrigger a new CircleCI pipeline for a project. Optionally specify branch, tag, or parameters.
-
cohere_chatExecuteChat with a Cohere Command model. Supports system preamble and conversation history.
-
cohere_classifyExecuteClassify texts into categories using Cohere Classify with few-shot examples.
-
cohere_generateExecuteGenerate text completions using Cohere Command models.
-
commonsensepass_checkExecuteRun the verdict-only CommonSensePass sanity gate before a worker claims healthy, quiet, no_work, pass, done, merge_ready, duplicate_wake, or route.
-
complex_calcExecuteComplex number arithmetic: add, subtract, multiply, divide, magnitude, conjugate, or polar conversion.
-
compliancepass_runExecuteRun CompliancePass against a local repo path. Returns evidence-backed readiness guidance, gaps, next actions, and an in-session run id. Historical EnterprisePass references are ...
-
convex_hull_3dExecuteCompute the 3D convex hull of a point set, returning triangular faces.
-
convolutionExecuteCompute discrete convolution of a signal with a kernel. Supports full, same, and valid modes.
-
copypass_runExecuteStart a deterministic CopyPass review for caller-provided AI-generated copy. Returns evidence-backed copy findings, scope boundaries, disclaimer text, a structured copypass_rece...
-
csuite_analyzeExecuteRun a C-Suite multi-perspective analysis on a business scenario.
-
de_bruijnExecuteGenerate a de Bruijn sequence B(k,n) containing every k-ary substring of length n exactly once.
-
dinic_max_flowExecuteCompute maximum flow in a network using Dinic's algorithm.
-
edmonds_karpExecuteCompute maximum flow and minimum cut in a flow network using the Edmonds-Karp (BFS-based Ford-Fulkerson) algorithm.
-
eertreeExecuteBuild a palindromic tree (eertree) to count distinct palindromic substrings.
-
elevenlabs_text_to_speechExecuteConvert text to speech with a selected ElevenLabs voice. Returns base64-encoded audio.
-
euler_tourExecuteCompute Euler tour of a tree with tin/tout timestamps, depths, and subtree sizes.
-
fenwick_2dExecute2D Fenwick tree for point updates and rectangle sum queries.
-
fenwick_rangeExecuteFenwick tree with range update and range query support using two BITs.
-
fenwick_treeExecuteBuild a Fenwick tree (Binary Indexed Tree) from values and run point updates and range sum queries.
-
fft_transformExecuteFast Fourier Transform (Cooley-Tukey radix-2) with optional inverse.
-
flowpass_runExecuteRun FlowPass against a public fixture or registered pack. Returns journey readiness, step verdicts, hat outputs, exclusions, and a stored report. Without fixture proof, returns ...
-
floyd_warshallExecuteCompute all-pairs shortest paths using Floyd-Warshall.
-
fly_create_machineExecuteCreate a new machine in a Fly.io app.
-
game_of_life_stepExecuteRun Conway's Game of Life simulation steps (local, no network).
-
gaussian_eliminationExecuteSolve a system of linear equations via Gaussian elimination with partial pivoting.
-
geopass_runExecuteRun GEOPass against a public URL. Returns a live-readonly AI answer-engine readiness receipt covering answer extractability, entity clarity, citation/sourceability, freshness cu...
-
github_actionExecuteInteract with the GitHub REST API: search/read repos, create branches and commits, open PRs, comment, merge, and read workflow checks.
-
goertzelExecuteCompute a single DFT frequency bin using the Goertzel algorithm.
-
graph_coloringExecuteColor vertices of an undirected graph using a greedy algorithm so no adjacent vertices share a color.
-
graph_condensationExecuteCompute SCC condensation of a directed graph into a DAG using Kosaraju's algorithm.
-
groq_chat_completionExecuteRun a fast LLM inference with Groq. Supports Llama 3, Mixtral, Gemma, and other open models at high speed.
-
heavy_light_decompositionExecutePerform heavy-light decomposition of a tree for efficient path queries.
-
higgsfield_generate_imageExecuteGenerate a Higgsfield image from a prompt. Prefers the customer's connected Higgsfield MCP account login and subscription credits; api_key is only the Cloud API fallback.
-
higgsfield_generate_videoExecuteGenerate a Higgsfield video from a prompt. Prefers the customer's connected Higgsfield MCP account login and subscription credits; api_key is only the Cloud API fallback.
-
hopcroft_karpExecuteFind maximum matching in a bipartite graph using the Hopcroft-Karp algorithm in O(E * sqrt(V)).
-
huffman_codeExecuteBuild a Huffman coding tree for the given text and return the code table, encoded bit count, compression ratio, and entropy.
-
hungarian_assignExecuteSolve the assignment problem (optimally assign N workers to N tasks) using the Hungarian algorithm.
-
hypothesis_testExecutePerform statistical hypothesis tests: z-test, t-test, or chi-squared test. Returns test statistic, p-value, and rejection decision.
-
igniteonly_apiExecuteRun IgniteOnly💥 on a verified NudgeOnly bridge result or deterministic evidence. Emits a compact public worker wake packet only when safety gates pass.
-
igniteonly_receipt_consumerExecuteConsume a NudgeOnly receipt bridge result and emit a compact IgniteOnly worker wake packet when verified. It never edits code, merges, approves, closes, or marks done.
-
kling_generate_videoExecuteGenerate a high-quality video from text using Kling AI (Kuaishou). Supports standard and professional modes. Returns a task_id to poll for completion.
-
kmeans_clusterExecutePartition points into k clusters using the k-means algorithm.
-
kmp_automatonExecuteBuild a full KMP DFA transition table for streaming pattern matching.
-
knapsack_solveExecuteSolve the 0-1 knapsack problem: pick items to maximize value within a weight capacity.
-
kosaraju_sccExecuteFind all strongly connected components in a directed graph using Kosaraju's two-pass algorithm.
-
legalpass_runExecuteRun a LegalPass issue-spotting pass against a URL, contract upload, or repo. With fixture_text, returns deterministic public evidence; without it, returns the guarded run plan.
-
linear_solveExecuteSolve a system of linear equations Ax = b using Gaussian elimination with partial pivoting.
-
link_cut_treeExecuteDynamic forest connectivity with link, cut, connected, and path sum queries using link-cut trees.
-
lru_simulateExecuteSimulate an LRU cache over a sequence of key accesses and report hit/miss rates.
-
markov_generateExecuteGenerate text using a Markov chain trained on input text (word or character level).
-
matrix_decompExecuteMatrix decomposition and analysis: LU factorization, transpose, trace, or rank.
-
matrix_exponentiationExecuteRaise a square matrix to a non-negative integer power using fast exponentiation, with optional modular arithmetic.
-
matrix_inverseExecuteCompute the inverse and determinant of a square matrix using Gauss-Jordan elimination.
-
matrix_operateExecutePerform matrix operations: add, multiply, transpose, or determinant.
-
matrix_rankExecuteCompute the rank of a matrix using Gaussian elimination with partial pivoting.
-
max_independent_setExecuteFind the maximum independent set of a graph using exact bitmask enumeration (up to 20 vertices).
-
min_cost_max_flowExecuteCompute minimum cost maximum flow using successive shortest paths (SPFA).
-
min_vertex_coverExecuteFind the minimum vertex cover of a graph using exact bitmask enumeration (up to 20 vertices).
-
mistral_chat_completionExecuteRun a chat completion with a Mistral AI model (mistral-small, mistral-medium, mistral-large, etc.).
-
mistral_create_embeddingExecuteCreate vector embeddings for text using Mistral's embedding model.
-
monte_carlo_estimateExecuteMonte Carlo estimation: estimate pi or compute a definite integral via random sampling.
-
mos_algorithmExecuteOffline range query processing using Mo's algorithm with sqrt decomposition (range sum and distinct count).
-
mst_findExecuteFind the minimum spanning tree of a weighted graph using Kruskal's algorithm.
-
neon_execute_sqlExecuteExecute a SQL query against a Neon database endpoint.
-
nttExecuteMultiply two polynomials using Number Theoretic Transform (mod 998244353).
-
nudgeonly_apiExecuteRun 👉Nudge, the PinballWake NudgeOnlyAPI worker, through OpenRouter free routing. Use only for painpoint hints and simple-English nudge summaries. It cannot merge, close, appro...
-
numerical_integrateExecuteNumerical integration of a math expression using Simpson's rule, trapezoid, or midpoint method.
-
ode_solveExecuteSolve an ordinary differential equation numerically using Euler or RK4 method. Provide the ODE as a JS expression in terms of t and y.
-
openai_chat_completionExecuteRun a chat completion with an OpenAI model (GPT-4o, GPT-4, etc.).
-
openai_create_embeddingExecuteCreate vector embeddings for text using an OpenAI embedding model.
-
openai_generate_imageExecuteGenerate images from a text prompt using DALL-E.
-
page_rankExecuteCompute PageRank scores for nodes in a directed graph.
-
partition_countExecuteCount integer partitions of n with optional max part size and part count constraints.
-
perplexity_chat_completionExecuteRun a search-augmented chat completion with Perplexity AI. Returns grounded answers with citations from the web.
-
pika_generate_videoExecuteGenerate a creative AI video from a text prompt using Pika. Optionally animate an input image. Returns a generation_id to poll for completion.
-
pollard_rhoExecuteFactor an integer using Pollard's rho with Miller-Rabin primality testing.
-
polynomial_opsExecutePerform polynomial operations: evaluate, derivative, integral, add, or multiply. Coefficients are highest degree first.
-
posthog_queryExecuteRun an ad-hoc HogQL (SQL) query against a PostHog project's events.
-
postmark_send_emailExecuteSend a transactional email via Postmark. Supports HTML and plain text.
-
prefix_functionExecuteCompute the KMP prefix/failure function array, with optional pattern occurrence counting.
-
proportion_solveExecuteSolve a proportion a/b = c/d given any 3 values.
-
pushonly_apiExecuteRun PushOnly📬 on a verified IgniteOnly wake packet. Emits a public worker push envelope for a known worker route only; never builds, merges, assigns, closes, or marks done.
-
qc_check_apiExecuteTest a list of API endpoints and report which ones return the expected HTTP status. Runs each endpoint sequentially.
-
qc_learningsExecuteThe hard-coded QC learnings library: field-proven failure patterns (silent test passes, false-red CI, deploy verification traps, release gate ordering) with the exact recipes th...
-
qc_run_checklistExecuteRun a sequential QC checklist against a website URL. Checks site load, SSL, meta tags, og:image, robots.txt, sitemap, console errors, broken links, response time, and copy quali...
-
railfence_processExecuteEncrypt or decrypt text using the rail fence (zigzag) cipher.
-
rb_tree_simExecuteBuild a red-black tree from a list of keys. Returns inorder traversal, tree height, black height, and validity check.
-
render_trigger_deployExecuteTrigger a new deploy for a Render service.
-
replicate_cancel_predictionExecuteCancel a running Replicate prediction.
-
replicate_create_predictionExecuteRun a Replicate model by creating a prediction.
-
rl_encodeExecuteRun-length encode or decode a string.
-
rle_encode_decodeExecuteRun-length encode a numeric array into runs, or decode runs back to a numeric array.
-
rmq_sparseExecuteBuild a sparse table for O(1) range minimum/maximum queries.
-
root_findExecuteFind roots of a math expression using Newton's method or bisection.
-
runlength_processExecuteRun-length encode or decode text (e.g. aaabbb to 3a3b).
-
running_statsExecuteCompute running (sliding window) mean, standard deviation, min, and max over a numeric array.
-
runway_generate_videoExecuteGenerate a video from text or an image using Runway ML. Supports text-to-video and image-to-video. Returns a task_id to poll for completion.
-
securitypass_runExecuteStart a scope-gated SecurityPass scan against a registered pack or target URL. Returns a safe securitypass_receipt_v1 proof envelope without raw secrets or PoC payloads.
-
segment_treeExecuteBuild a segment tree for range queries (sum/min/max) with point updates on a mutable array.
-
seopass_runExecuteRun SEOPass against a public URL or registered pack. Returns a live-readonly SEO verdict, score, findings, fix prompts, and an in-session run id.
-
setops_calculateExecutePerform set operations: union, intersection, difference, symmetric difference, subset/superset.
-
shell_sortExecuteSort an array using Shell sort with gap sequence tracking, comparison and swap counts.
-
shunting_yardExecuteConvert an infix math expression to postfix (RPN) and evaluate it.
-
sigmoid_calculateExecuteCompute activation functions (sigmoid, tanh, relu, leaky_relu, elu, swish) and their derivatives.
-
simplex_solveExecuteSolve a linear programming problem (maximize objective subject to <= constraints) using the simplex method.
-
skip_list_simExecuteSimulate a skip list: insert values, get sorted output, and search for elements in O(log n) expected time.
-
slack_actionExecutePerform a Slack action: slack_send, slack_read, slack_search, slack_thread_reply, slack_channels, slack_react, slack_upload.
-
sloppass_runExecuteRun SlopPass against caller-provided source files, a unified diff, or a GitHub PR target whose public .diff should be fetched. Returns an evidence-backed slop-signal receipt plu...
-
sos_dpExecuteSum over Subsets (SOS) dynamic programming / zeta transform on bitmasks.
-
sparse_tableExecuteBuild a sparse table for O(1) range minimum or maximum queries on a static array.
-
spline_interpolateExecuteNatural cubic spline interpolation through data points, with optional evaluation.
-
stability_text_to_imageExecuteGenerate images from a text prompt using Stability AI.
-
start_crew_runExecuteCall this tool when the user wants to start a Crews Council run. In a sampling-capable MCP client, it prepares the run, asks advisors for opinions, runs peer review, persists th...
-
suffix_array_buildExecuteBuild a suffix array for a string, with optional LCP (longest common prefix) array.
-
suffix_automatonExecuteBuild a suffix automaton for a string and count distinct substrings.
-
suffix_treeExecuteBuild a suffix tree (Ukkonen's algorithm) and compute distinct substrings and longest repeated substring.
-
supabase_execute_sqlExecuteRun a SQL statement against a Supabase project's database via the Management API. Destructive statements require confirm: true.
-
testpass_runExecuteStart a TestPass run against an MCP server. Seeds deterministic and agent checks from the given pack and returns the run id plus an initial verdict summary. Response includes wa...
-
text_transformExecuteTransform text (uppercase, lowercase, title case, slug, etc.).
-
togetherai_chat_completionExecuteRun a chat completion with any Together AI model. Supports Llama, Mistral, Qwen, and 100+ open-source models.
-
togetherai_completionExecuteRun a text completion with any Together AI model.
-
topo_sortExecuteTopological sort of a directed graph with cycle detection.
-
treap_simExecuteSimulate a treap (randomized BST): insert values, get sorted output, tree height, and search.
-
trie_opsExecuteBuild a trie (prefix tree) from words and perform search, prefix count, and autocomplete queries.
-
tsp_solveExecuteFind a short tour visiting all cities and returning to start (traveling salesman, nearest-neighbor heuristic).
-
turso_execute_sqlExecuteExecute a SQL query against a Turso edge database.
-
twilio_make_callExecuteInitiate an outbound phone call via Twilio.
-
twilio_send_smsExecuteSend an SMS via Twilio.
-
twilio_send_verifyExecuteSend a verification code via Twilio Verify (SMS, call, email, or WhatsApp).
-
two_satExecuteSolve a 2-SAT boolean satisfiability problem using implication graph and SCC.
-
union_findExecutePerform union-find (disjoint set) operations: merge elements and query connectivity.
-
upstash_kafka_produceExecuteProduce messages to an Upstash Kafka topic.
-
urlscan_scanExecuteSubmit a URL for scanning on urlscan.io.
-
uxpass_runExecuteRun a UX journey/usability check synchronously against a URL. Executes the deterministic uxpass-core check set and returns the run id, status, UX Score, summary, and uxpass_rece...
-
vigenere_processExecuteEncrypt or decrypt text using the Vigenere polyalphabetic cipher.
-
virustotal_scan_urlExecuteSubmit a URL for scanning on VirusTotal.
-
wavelet_treeExecuteBuild a wavelet tree for an integer array and answer range kth-smallest queries.
-
z_algorithmExecuteCompute the Z-array for a string, or find pattern matches using the Z-algorithm in linear time.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.