cve_get_scan_progress

What cve_get_scan_progress does on Aapanel

AI agents call cve_get_scan_progress to retrieve information from Aapanel without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why cve_get_scan_progress is rated Low

This tool retrieves monitoring/status information about a CVE security scan process. It performs no modifications, deletions, executions, or financial transactions. The 'Get' verb and status-reporting nature clearly indicate a read-only operation with no side effects. Severity is low as unauthorized access to scan progress information poses minimal risk to system integrity.

From the tool's definition Tool name 'cve_get_scan_progress' and description 'Get CVE scan progress bar/status' indicate a retrieval operation that queries the status of an ongoing CVE scan without modifying any data.

The rule that runs cve_get_scan_progress safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Aapanel, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cve_get_scan_progress, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "cve_get_scan_progress": {}
  }
}

Questions about cve_get_scan_progress