start_sqlmap_os_shell

What start_sqlmap_os_shell does on Pentester-MCP

AI agents invoke start_sqlmap_os_shell to trigger actions in Pentester-MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why start_sqlmap_os_shell is rated High

This tool executes arbitrary OS-level shell commands through SQLMap's OS shell functionality, which is a code execution primitive with unrestricted blast radius. An AI agent with access could compromise target systems, establish reverse shells, exfiltrate data, or pivot through networks. While the tool description is empty (lowering confidence slightly), the name and server context are unambiguous.

From the tool's definition Tool name 'start_sqlmap_os_shell' indicates execution of operating system shell commands via SQLMap, a SQL injection exploitation tool. Server description confirms this is a penetration testing MCP that enables 'autonomous execution' of exploitation tools.

The rule that runs start_sqlmap_os_shell safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pentester-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For start_sqlmap_os_shell, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "start_sqlmap_os_shell": {
      "limits": [
        {
          "counter": "start_sqlmap_os_shell_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about start_sqlmap_os_shell