scan_secrets_builtin

What scan_secrets_builtin does on Pentest Ai

AI agents call scan_secrets_builtin to retrieve information from Pentest Ai without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why scan_secrets_builtin is rated Low

This tool retrieves and analyzes HTTP response content to detect patterns indicative of leaked secrets or credentials. It is fundamentally a scanning/detection operation that reads data and reports findings, with no capacity to modify, execute code, delete data, or move money. The 'scan' action and 'built-in' implementation indicate passive analysis.

From the tool's definition Tool name and description: 'Scan HTTP responses for leaked secrets and credentials (built-in)' — performs analysis and detection of secrets within HTTP response data without modifying, executing external operations, or deleting data.

The rule that runs scan_secrets_builtin safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pentest Ai, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For scan_secrets_builtin, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "scan_secrets_builtin": {}
  }
}

Questions about scan_secrets_builtin