so_imports

What so_imports does on SO Analyzer MCP

AI agents call so_imports to retrieve information from SO Analyzer MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why so_imports is rated Low

This tool retrieves metadata about imported functions in native Android SO libraries. It performs static analysis and introspection only—extracting information about symbols and function dependencies without executing code, modifying binaries, or causing side effects. It is a Read operation with low severity since the blast radius of misuse is limited to information disclosure.

From the tool's definition Tool name 'so_imports' and description '获取SO导入函数列表' (get SO imported function list) indicate a data retrieval operation that queries imported functions from a binary artifact without modifying it.

The rule that runs so_imports safely

PolicyLayer is an MCP gateway: it sits between your AI agents and SO Analyzer MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For so_imports, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "so_imports": {}
  }
}

Questions about so_imports