Review steps
- Search tool names and descriptions for delete, drop, truncate, overwrite, reset, revoke, execute, and refund behavior.
- Check whether the tool can affect customer, financial, production, or repository systems.
- Place high-impact tools behind approval or a block policy.
- Log the decision so buyers can see how the risk was handled.