High-risk tools in Gsd

High severity Gsd MCP Server 7 of 34 tools

7 of the 34 tools in Gsd are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

gsd_commit Execute

Commit planning documents to git
gsd_debug Execute

Systematic debugging with persistent state across context resets
gsd_execute_phase Execute

Execute all plans for a phase in parallel waves
gsd_quick Execute

Execute ad-hoc task with GSD guarantees
gsd_run Execute

Run any GSD command directly (see gsd://help for full list)
gsd_spike Execute

Rapidly spike an idea with throwaway experiments
gsd_validate Execute

Run GSD validation checks (consistency, health, agents)

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Gsd

Tools at high risk

Attacks that target this class

More on Gsd

Enforce policy on every Gsd tool call.