feat(guard): read the Zerto task, and ask before guarding unknown tools (#6)

2026-09-21 15:07:43 -04:00
parent 5039f7378d
commit 1d53029038
10 changed files with 359 additions and 22 deletions
@@ -42,5 +42,27 @@
      "vm_arg": "host",
      "notes": "Writes a file into a Windows share. Changes the guest without a shell."
    }
+  ],
+  "read_only_tools": [
+    {
+      "server": "ssh",
+      "tool": "read_file",
+      "notes": "Reads a file from the guest. Does not change it."
+    },
+    {
+      "server": "ssh",
+      "tool": "stat",
+      "notes": "File metadata only."
+    },
+    {
+      "server": "winrm",
+      "tool": "get_item",
+      "notes": "Windows read of a file or registry value."
+    },
+    {
+      "server": "powershell",
+      "tool": "get_content",
+      "notes": "Reads file contents on a Windows guest."
+    }
  ]
 }