High-risk tools in Poof

High severity Poof MCP Server 7 of 11 tools

7 of the 11 tools in Poof are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

create_session Execute

Create new zmx session + open Terminal.app
resize_terminal Execute

Resize the terminal
restart_terminal Execute

Restart the terminal (optionally with a new command)
send_keystrokes Execute

Send key presses (e.g., [
type_text Execute

Type a string
wait_for_stable Execute

Wait for screen to stop changing (500ms stable duration)
wait_for_text Execute

Wait for text to appear on screen (5s default timeout)

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Poof

Tools at high risk

Attacks that target this class

More on Poof

Enforce policy on every Poof tool call.