High-risk tools in Python Code Runner

High severity Python Code Runner MCP Server 4 of 4 tools

4 of the 4 tools in Python Code Runner are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

run_python_code Execute

Run Python code in the current environment.
run_python_file Execute

Run an existing Python file.
pip_install_package Execute

Install a Python package using pip.
save_to_file_and_run Execute

save_to_file_and_run

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Python Code Runner

Tools at high risk

Attacks that target this class

More on Python Code Runner

Enforce policy on every Python Code Runner tool call.