github-api.list_secret_scanning_alerts high conf mediumhuman approval
Enumerates every secret-scanning alert in a repository, revealing the locations of leaked credentials, tokens, and keys at scale.
github-api.actions_run_trigger high conf mediumhuman approval
Triggers a GitHub Actions workflow run, executing CI/CD pipeline code that can build, test, or deploy without a review gate.
github-api.pull_request_review_write high conf mediumhuman approval
Creates, submits, or deletes pull-request reviews; approving one's own PR or deleting a review erases the change-approval trail.
All other tools (19)
github-api.create_branch low conf mediumallow
Creates a new branch from an existing ref; isolated from other branches and trivially reversible.
github-api.create_gist medium conf mediumaudit
Creates a gist that can be public, providing a path to expose proprietary code or embedded secrets outside the organization.
github-api.create_or_update_file medium conf mediumaudit
Creates or overwrites a single file on a branch via commit, changing source code directly in the repository.
github-api.create_pull_request low conf mediumallow
Opens a new pull request proposing changes; reviewable and reversible before any merge occurs.
github-api.create_pull_request_with_copilot medium conf mediumaudit
Delegates a coding task to the autonomous Copilot agent, which writes code and opens a pull request with minimal human authorship.
github-api.create_repository medium conf mediumaudit
Provisions a new repository under the account or organization, expanding the managed code surface and its default access grants.
github-api.fork_repository low conf mediumallow
Forks a repository into a new namespace; a copy operation with no effect on the source repository.
github-api.get_job_logs medium conf mediumaudit
Retrieves raw Actions job logs, which frequently contain leaked environment variables, tokens, and internal endpoint details.
github-api.get_secret_scanning_alert medium conf mediumaudit
Returns the details of a single secret-scanning alert, exposing which credential leaked and where it was committed.
github-api.get_team_members medium conf mediumaudit
Lists the members of an organization team, exposing developer identities and the access-boundary of that team.
github-api.issue_write low conf mediumallow
Creates or updates an issue or pull request; reversible tracker content with no direct effect on code or access.
github-api.label_write low conf mediumallow
Creates, updates, or deletes repository labels used to categorize issues and pull requests; low-impact metadata.
github-api.list_code_scanning_alerts medium conf mediumaudit
Enumerates code-scanning alerts, surfacing exploitable security weaknesses across a repository's source before they are remediated.
github-api.list_dependabot_alerts medium conf mediumaudit
Lists Dependabot vulnerability alerts, disclosing which dependencies carry known exploitable flaws across the repository.
github-api.list_repository_collaborators medium conf mediumaudit
Reveals every principal with access to a repository and their permission level, mapping the codebase's access-control surface.
github-api.projects_write low conf mediumallow
Manages GitHub Projects boards, fields, and items; planning-layer changes that are reviewable and reversible.
github-api.push_files medium conf mediumaudit
Pushes multiple files to a branch in a single commit, writing source directly to the repository without a pull request.
github-api.search_code medium conf mediumaudit
Searches code across every repository the token can read, which can surface hardcoded secrets or proprietary snippets at scale.
github-api.update_pull_request low conf mediumallow
Edits a pull request's title, body, state, or base branch; metadata-level and reversible.