identify_attack_surfaces

What identify_attack_surfaces does on Kali Security MCP

AI agents call identify_attack_surfaces to retrieve information from Kali Security MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why identify_attack_surfaces is rated Low

This tool retrieves and analyzes information about potential vulnerabilities or entry points in a target system, which is characteristic of reconnaissance activities. It does not execute commands, modify data, delete resources, or move money. While the Kali Linux context suggests offensive security use, the tool itself is read-only analysis.

From the tool's definition Tool name 'identify_attack_surfaces' and description '基于目标信息识别攻击面' (identify attack surfaces based on target information) indicates analysis and reconnaissance without modifying systems. The function performs information gathering and mapping.

The rule that runs identify_attack_surfaces safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Kali Security MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For identify_attack_surfaces, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "identify_attack_surfaces": {}
  }
}

Questions about identify_attack_surfaces