High-risk tools in Otoinstall

High severity Otoinstall MCP Server 2 of 9 tools

2 of the 9 tools in Otoinstall are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

deploy_project Execute

Deploy a project to a live server. IMPORTANT: You MUST call analyze_project first and show the analysis to the user. Only call this tool after the user confirms they want to pro...
deploy_zip Execute

Deploy an existing ZIP file to a live server via OtoInstall. Use this when you already have a ZIP file ready.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Otoinstall

Tools at high risk

Attacks that target this class

More on Otoinstall

Enforce policy on every Otoinstall tool call.