get_workflow_status

What get_workflow_status does on Kali Security MCP

AI agents call get_workflow_status to retrieve information from Kali Security MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_workflow_status is rated Low

This tool queries the status of existing workflows. It performs a read operation with no side effects—it neither modifies data, executes commands, deletes resources, nor commits financial transactions. Despite being on a penetration testing platform, the tool itself is purely informational and cannot cause harm through misuse. Severity is low because retrieving status information has minimal blast radius.

From the tool's definition Tool name 'get_workflow_status' and description '获取工作流状态' (Get workflow status) indicate a retrieval/query operation that retrieves the current state of a workflow without modifying, executing, or destroying data.

The rule that runs get_workflow_status safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Kali Security MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_workflow_status, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_workflow_status": {}
  }
}

Questions about get_workflow_status