High-risk tools in Promethean OS MCP

High severity Promethean OS MCP MCP Server 20 of 69 tools

20 of the 69 tools in Promethean OS MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

exec_run Execute

Execute a vetted shell command from the allowlist. Supports optional args when explicitly enabled.
github_graphql Execute

Post a GraphQL query to GitHub.
github_request Execute

Call GitHub REST API with optional ETag cache & pagination.
github_review_checkout_branch Execute

Check out an existing git branch.
github_review_push Execute

Push the current branch to the specified remote with optional upstream/force settings.
nx_generate_package Execute

Generate a new workspace package using the Nx tools:package generator.
ollama_enqueue_chat_completion Execute

Queue a chat completion against a conversation or raw messages
ollama_enqueue_job_from_template Execute

Queue a job that will execute a named template
ollama_pull Execute

Queue a model pull (no-op executor in MVP)
ollama_start_conversation Execute

Create a conversation; optionally seeds initial user message
pnpm_install Execute

Run pnpm install at the workspace root or limited to filtered packages.
pnpm_run_script Execute

Execute a pnpm script, optionally filtered to specific workspace packages.
process_enqueue_task Execute

Enqueue a command for execution respecting concurrency limits.
process_stop Execute

Stop a running task via id, pid, or name and return trailing output.
tdd_coverage Execute

Run c8+AVA to produce coverage summary; enforce optional thresholds.
tdd_mutation_score Execute

Run Stryker mutation testing and return the score (fail if below minScore).
tdd_property_check Execute

Dynamically import a module export that builds a fast-check property and assert it.
tdd_run_tests Execute

Run AVA via npx with JSON (or TAP) output and return aggregated results. For long-running watchers, use tdd_start_watch/tdd_get_watch_changes instead.
tdd_start_watch Execute

Start an AVA --watch process and stream output via getWatchChanges.
tdd_stop_watch Execute

Stop the running watch process.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Promethean OS MCP

Tools at high risk

Attacks that target this class

More on Promethean OS MCP

Enforce policy on every Promethean OS MCP tool call.