so_get_function_bytes

What so_get_function_bytes does on SO Analyzer MCP

AI agents call so_get_function_bytes to retrieve information from SO Analyzer MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why so_get_function_bytes is rated Low

This tool queries and extracts bytecode information from SO files for analysis purposes. While it operates on sensitive artifacts (native libraries), it performs pure retrieval with no capability to modify, delete, or execute code. The blast radius is limited to information disclosure about the application's binary structure, which is typical for static analysis tools.

From the tool's definition Tool name 'so_get_function_bytes' and description '获取函数的字节码' (get function bytecode) indicate data retrieval without modification. The function retrieves bytecode from a compiled binary—a read-only operation with no side effects.

The rule that runs so_get_function_bytes safely

PolicyLayer is an MCP gateway: it sits between your AI agents and SO Analyzer MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For so_get_function_bytes, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "so_get_function_bytes": {}
  }
}

Questions about so_get_function_bytes