gau_discovery

What gau_discovery does on Pengstrike

AI agents call gau_discovery to retrieve information from Pengstrike without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gau_discovery is rated Low

GAU (Google Analytics URL discovery) passively retrieves URL/endpoint information from public sources without modifying, executing code, or deleting data. In the context of a security recon tool, it performs data retrieval and enumeration (Read category). Severity is medium because it gathers intelligence that can inform subsequent attacks, but the tool itself has no direct destructive capability.

From the tool's definition Tool name 'gau_discovery' suggests GoogleAnalyticsURL discovery, a passive reconnaissance technique for enumerating URLs and endpoints. The description is empty, limiting certainty.

The rule that runs gau_discovery safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pengstrike, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gau_discovery, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gau_discovery": {}
  }
}

Questions about gau_discovery