Mutates or destroys production data — a single TRUNCATE or DDL statement can wipe a table the connection role owns, with no undo beyond a cluster backup.
Reads arbitrary SQL results from the cluster, so one unbounded SELECT can pull every row of customer data the connection role can reach into the agent's context.
All other tools (1)
yugabytedb.summarize_databaselowconf highallow
Returns the table, column, and row-count inventory for a schema, exposing the data model an attacker would need to target specific tables.