ctf_quick_scan

What ctf_quick_scan does on Kali Security MCP

AI agents invoke ctf_quick_scan to trigger actions in Kali Security MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why ctf_quick_scan is rated High

This tool performs active scanning and vulnerability discovery against targets, which constitutes executing security probes and network operations. While framed for CTF environments, it runs active reconnaissance tools from Kali Linux against systems. The server context of penetration testing and the sibling tools (adaptive_network_penetration, adaptive_web_penetration, etc.) confirm this is an active execution tool.

From the tool's definition CTF快速扫描 - 针对CTF环境优化的快速漏洞发现 (CTF quick scan - rapid vulnerability discovery optimized for CTF environments); part of a penetration testing server integrating 193 Kali Linux security tools

The rule that runs ctf_quick_scan safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Kali Security MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For ctf_quick_scan, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "ctf_quick_scan": {
      "limits": [
        {
          "counter": "ctf_quick_scan_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about ctf_quick_scan