so_xref_string

What so_xref_string does on SO Analyzer MCP

AI agents call so_xref_string to retrieve information from SO Analyzer MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why so_xref_string is rated Low

This is a read-only analysis tool. It searches and retrieves cross-reference data from native Android libraries, similar to debugger/decompiler queries (IDA Pro reference indicates static analysis). No code execution, data modification, or destructive operations occur. The low severity reflects that misuse would only expose code structure and strings already present in the binary, not cause external damage.

From the tool's definition Tool name and description indicate it 'finds string cross-references' and 'returns function context' (IDA-level functionality).

The rule that runs so_xref_string safely

PolicyLayer is an MCP gateway: it sits between your AI agents and SO Analyzer MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For so_xref_string, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "so_xref_string": {}
  }
}

Questions about so_xref_string