spiderfoot

What spiderfoot does on Nyxstrike

AI agents invoke spiderfoot to trigger actions in Nyxstrike. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why spiderfoot is rated High

SpiderFoot is a legitimate OSINT automation tool that executes reconnaissance and information-gathering operations against specified targets. While not inherently destructive or financial, it performs active external operations whose effects (network reconnaissance, target profiling, information collection) depend on the arguments provided (target, modules, scope). This fits the Execute category.

From the tool's definition Tool name 'spiderfoot' combined with description 'Execute SpiderFoot for OSINT automation with enhanced logging' — the verb 'Execute' and the nature of SpiderFoot (an open-source OSINT reconnaissance framework that runs automated scans and probes against…

The rule that runs spiderfoot safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nyxstrike, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For spiderfoot, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "spiderfoot": {
      "limits": [
        {
          "counter": "spiderfoot_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about spiderfoot