so_list_libs

What so_list_libs does on SO Analyzer MCP

AI agents call so_list_libs to retrieve information from SO Analyzer MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why so_list_libs is rated Low

This tool retrieves and enumerates SO (native library) files present in an APK package. It is a passive read operation with no side effects—it queries the contents of an APK without altering, executing, or removing anything. The severity is low because listing libraries poses minimal risk; the information is already present in the APK and disclosure does not directly enable exploitation without additional tools.

From the tool's definition Tool name 'so_list_libs' and description '列出APK中的所有SO库' (list all SO libraries in APK) indicate data retrieval only. No modification, deletion, execution, or financial operations are performed.

The rule that runs so_list_libs safely

PolicyLayer is an MCP gateway: it sits between your AI agents and SO Analyzer MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For so_list_libs, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "so_list_libs": {}
  }
}

Questions about so_list_libs