Git

Unverified

REPODave-London/Pare

FRisk gradecritical blast radius

Catalogue entry updated 41 days ago

Auth postureNot probedno remote endpoint probed yet

Tools20211 Destructive · 92 Execute · 30 Write · 69 Read

Worst categoryDestructivegrade tracks the peak, not the average

Capability mix

Destructive 11Execute 92Write 30Read 69

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Tools 202

branchDestructiveHigh cleanDestructiveHigh package-cleanDestructiveMedium removeDestructiveHigh resetDestructiveHigh

View all 202 tools

secret-deleteDestructiveHigh stashDestructiveMedium tagDestructiveHigh variable-deleteDestructiveHigh workspaceDestructiveHigh worktreeDestructiveHigh add-packageExecuteHigh ansible-galaxyExecuteHigh ansible-playbookExecuteHigh apiExecuteHigh applyExecuteHigh auditExecuteMedium bazelExecuteHigh bisectExecuteMedium blackExecuteMedium buildExecuteHigh bundle-execExecuteHigh bundle-installExecuteMedium checkExecuteMedium checkoutExecuteMedium cherry-pickExecuteHigh clippyExecuteMedium cmakeExecuteHigh compose-buildExecuteHigh compose-downExecuteHigh compose-upExecuteHigh condaExecuteHigh coverageExecuteMedium developExecuteHigh docExecuteMedium esbuildExecuteHigh execExecuteCritical flake-checkExecuteMedium fmtExecuteMedium gem-installExecuteHigh generateExecuteCritical getExecuteMedium golangci-lintExecuteMedium gradle-buildExecuteHigh gradle-testExecuteHigh hadolintExecuteMedium helmExecuteHigh initExecuteMedium installExecuteHigh jqExecuteHigh lernaExecuteHigh lintExecuteMedium maven-buildExecuteHigh maven-testExecuteHigh maven-verifyExecuteMedium mergeExecuteHigh mod-tidyExecuteMedium mongosh-evalExecuteHigh mypyExecuteMedium mysql-queryExecuteCritical nvmExecuteHigh nxExecuteHigh oxlintExecuteMedium package-resolveExecuteMedium pip-installExecuteCritical playwrightExecuteHigh poetryExecuteHigh postExecuteHigh psql-queryExecuteCritical publishExecuteMedium pullExecuteMedium pyenvExecuteHigh pytestExecuteHigh rebaseExecuteHigh redis-commandExecuteHigh reloadExecuteHigh repo-cloneExecuteMedium requestExecuteHigh restoreExecuteMedium rollupExecuteMedium rsyncExecuteHigh ruff-checkExecuteMedium ruff-formatExecuteMedium runExecuteHigh run-rerunExecuteMedium semgrepExecuteMedium shellExecuteCritical shellcheckExecuteMedium ssh-runExecuteHigh ssh-testExecuteMedium stylelintExecuteMedium taskExecuteHigh testExecuteHigh trivyExecuteMedium tscExecuteMedium turboExecuteHigh uv-installExecuteHigh uv-runExecuteHigh vagrantExecuteHigh vetExecuteMedium vite-buildExecuteHigh webpackExecuteHigh yqExecuteHigh addWriteMedium archiveWriteMedium biome-formatWriteMedium commitWriteMedium configWriteMedium flake-updateWriteMedium gist-createWriteMedium issue-closeWriteMedium issue-commentWriteMedium issue-createWriteMedium issue-updateWriteMedium label-createWriteMedium package-initWriteMedium package-updateWriteMedium pr-closeWriteMedium pr-commentWriteMedium pr-createWriteMedium pr-mergeWriteHigh pr-readyWriteMedium pr-reopenWriteMedium pr-reviewWriteHigh pr-updateWriteMedium prettier-formatWriteHigh pushWriteMedium release-createWriteMedium remoteWriteMedium secret-setWriteHigh submoduleWriteMedium updateWriteMedium variable-setWriteHigh ansible-inventoryReadMedium biome-checkReadLow blameReadLow bundle-checkReadLow compose-logsReadLow compose-psReadLow countReadLow describeReadLow diffReadLow discover-toolsReadLow discussion-listReadLow envReadLow findReadLow flake-showReadLow format-checkReadLow gem-listReadLow gem-outdatedReadLow gitleaksReadMedium gradle-dependenciesReadLow gradle-tasksReadLow headReadLow imagesReadLow infoReadMedium inspectReadLow issue-listReadLow issue-viewReadLow label-listReadLow listReadLow list-packageReadLow logReadLow log-graphReadLow logsReadLow maven-dependenciesReadLow mongosh-statsReadLow mysql-list-databasesReadLow network-lsReadLow outdatedReadLow outputReadLow package-show-dependenciesReadLow pip-auditReadLow pip-listReadLow pip-showReadLow planReadLow pm-lsReadLow pr-checksReadLow pr-diffReadLow pr-listReadLow pr-viewReadLow psReadLow psql-list-databasesReadLow redis-infoReadLow redis-pingReadLow reflogReadLow release-listReadLow repo-viewReadLow run-listReadLow run-viewReadLow searchReadLow secret-listReadLow showReadLow ssh-keyscanReadLow stash-listReadLow state-listReadLow statsReadLow statusReadLow treeReadLow validateReadLow variable-listReadLow volume-lsReadLow

Change history

No change history on record for this server.

Recommended policy

branchdeny

add-packagerequire approval

addrate limit

Read-only toolsallow

Full policy breakdown with enforcement rules →