High-risk tools in Vibecontrols
29 of the 672 tools in Vibecontrols are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
vibecontrols_actions_executeExecuteExecute a Vibe Action and return the execution result.
-
vibecontrols_agents_healthExecuteRun health probes against all registered agents. Returns health status for each agent.
-
vibecontrols_auth_apps_authorize_urlExecuteBuild the OAuth authorization URL for an app (browser-only flow). Returns the URL to open in a browser; this tool does not perform any server call.
-
vibecontrols_configuration_security_policy_decisionExecuteFetch the OPA policy decision for a security scan run.
-
vibecontrols_configuration_security_run_scanExecuteTrigger a security scan for a vibe at a specific stage.
-
vibecontrols_conversations_typing_startExecuteBroadcast that the current actor started typing in a conversation.
-
vibecontrols_conversations_typing_stopExecuteBroadcast that the current actor stopped typing in a conversation.
-
vibecontrols_decks_buttons_executeExecuteExecute the action associated with a VibeDeck button on a specific agent.
-
vibecontrols_integrations_auth_oauth_initiateExecuteStart an OAuth flow; returns redirectUrl + state for the client to use.
-
vibecontrols_sandbox_startExecuteStart a sandbox. [STUB]
-
vibecontrols_sandbox_stopExecuteStop a sandbox. [STUB]
-
vibecontrols_sandboxes_startExecuteStart (resume) a stopped sandbox.
-
vibecontrols_sandboxes_stopExecuteStop a running sandbox.
-
vibecontrols_scheduler_executions_retryExecuteRe-run a failed (or completed) scheduled-job execution. Returns the new JobExecution row created for the retry.
-
vibecontrols_scheduler_jobs_execute_nowExecuteTrigger a scheduled job to execute immediately (out-of-band).
-
vibecontrols_sessions_bulk_restartExecuteRestart multiple sessions at once.
-
vibecontrols_sessions_bulk_stopExecuteStop multiple sessions at once.
-
vibecontrols_sessions_restartExecuteRestart a terminal session (stop then start).
-
vibecontrols_sessions_restart_terminalExecuteRestart the web terminal for a session.
-
vibecontrols_sessions_startExecuteStart a terminal session.
-
vibecontrols_sessions_start_target_terminalExecuteOpen a web terminal against a target host (SSH/RDP/VNC/DIRECT). Returns the connection info incl. ttydUrl.
-
vibecontrols_sessions_start_terminalExecuteStart a web terminal (ttyd) for browser-based access to a session.
-
vibecontrols_sessions_stopExecuteStop a running terminal session.
-
vibecontrols_sessions_stop_target_terminalExecuteStop a target terminal session.
-
vibecontrols_sessions_stop_terminalExecuteStop the ttyd web terminal for a session.
-
vibecontrols_tunnels_startExecuteTransition a tunnel to ACTIVE.
-
vibecontrols_tunnels_stopExecuteGracefully stop a running tunnel.
-
vibecontrols_vibe_deck_share_links_execute_shared_buttonExecuteExecute a button on a publicly shared VibeDeck.
-
vibecontrols_webhooks_triggerExecuteTrigger a webhook with a custom JSON payload.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.