workflow_execute

What workflow_execute does on Kali Security MCP

AI agents invoke workflow_execute to trigger actions in Kali Security MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why workflow_execute is rated High

This tool executes security testing workflows within the Kali Linux framework. While labeled as a security tool, from an AI safety perspective, workflow_execute has critical blast radius: an AI agent given access could automatically trigger penetration tests, SQL injection attempts, command injection tests, and network attacks against systems without proper authorization or human oversight.

From the tool's definition Tool name 'workflow_execute' combined with description '执行测试工作流' (Execute test workflow) in the Kali Security MCP context indicates execution of automated penetration testing workflows.

The rule that runs workflow_execute safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Kali Security MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For workflow_execute, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "workflow_execute": {
      "limits": [
        {
          "counter": "workflow_execute_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about workflow_execute