High-risk tools in GPT 5 5 x402 Low Cost Agent Tools
8 of the 214 tools in GPT 5 5 x402 Low Cost Agent Tools are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
gpt55_html_stripExecuteRemove HTML tags, scripts, styles, and common entities from short HTML snippets without calling an upstream model. Pay $0.002 per request with x402 exact USDC on Base or Solana ...
-
gpt55_json_minifyExecuteParse and minify JSON text or a JSON value without calling an upstream model. Pay $0.002 per request with x402 exact USDC on Base or Solana when advertised. Canonical live price...
-
gpt55_regex_matchExecuteRun a JavaScript regular expression against short text and return bounded matches without calling an upstream model. Pay $0.002 per request with x402 exact USDC on Base or Solan...
-
gpt55_regex_match_getExecuteRun a JavaScript regular expression against short text and return bounded matches without calling an upstream model. GET variant for agents that prefer query parameters. Pay $0....
-
gpt55_slugifyExecuteConvert text into a lower-case URL slug with a configurable separator without calling an upstream model. Pay $0.002 per request with x402 exact USDC on Base or Solana when adver...
-
gpt55_uri_codecExecuteEncode or decode URI components or full URI strings without calling an upstream model. Pay $0.002 per request with x402 exact USDC on Base or Solana when advertised. Canonical l...
-
gpt55_wallet_signing_safety_packExecuteBuild a single wallet/agent pre-signing decision pack from optional EIP-712 typed data, EVM calldata, expected chain, known addresses, and x402 spend policy. Returns risk levels...
-
gpt55_x402_receipt_bound_execution_gateExecuteEvaluate a paid x402 receipt, route, payTo, network, amount, actionRef, toolCallId, and paid result summary, then return allow/manual_review/deny guidance, receipt binding check...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.