Every tool Talos can use.
And the risk level of each one.

Compact site summary: versions, active theme, plugins, content counts and the current admin screen.

Search prior chats and reports, or load one session’s messages for continuity.

Pause the run and show an interactive multiple-choice question in chat.

Submit a structured plan for your approval before any work starts. Used in Plan mode.

Public web search for current background information, such as a newly disclosed vulnerability.

List installed plugins with status, version and available updates.

Full details for one plugin, by file path or name.

Regex-search sandboxed plugin source code.

Read numbered line ranges from a plugin file, capped at 200 lines per call.

Search the WordPress.org plugin directory.

Activate an installed plugin.

Deactivate a plugin. Talos cannot deactivate itself.

Install from WordPress.org by slug, with optional activation.

Update an installed plugin.

Permanently delete an inactive plugin.

Keyword search across posts, pages and public post types.

Load a single post or page by ID.

Create a draft post or page.

List, read, create, update, trash and restore content, plus revisions and meta.

List, inspect and edit media, alt text and featured images. Existing attachments only.

Discover taxonomies, then list, create, update, delete and assign terms.

List, read, create, edit, moderate, trash, restore and delete comments.

Navigation menus and their items.

Users and roles. Passwords are never accepted or returned.

List, inspect, activate and update themes. No remote install or delete.

Read allowlisted settings. Secrets, protected and serialized values are denied or redacted.

Update one allowlisted setting, with validation.

Table, column and index metadata. No row data.

Bounded SELECT, SHOW, DESCRIBE and EXPLAIN. Dangerous SQL is blocked and secrets redacted.

Runs bounded WordPress Site Health direct tests and returns structured findings.

Bounded, redacted log tail with search, a time window and error grouping.

WP-Cron events, overdue items, schedules and unusually frequent hooks.

One bounded same-site loopback or REST check, reporting status, latency and size.

Database server metrics, connection pressure and the largest prefixed tables.

Object cache state, transients and autoloaded-option pressure.

Diff two diagnostic snapshots to show what actually moved.

Preview rollback order and conflicts without touching the site.

Verify current resources against the change set’s recorded checksums.

Restore point metadata, approval state, checksums and pre/post images.

Roll back an approved change set in reverse order. Refuses resources that have drifted.

Draft, approve, reject, search and inspect learned skills. Approve and replay escalate risk.

Draft and inspect scheduled or hook-triggered workflows. Drafting counts as a write.

Email a workflow report to its fixed recipients. The agent cannot change the To list.

Durable job status, result and history.

Request cancellation of a queued, running or approval-paused job.

Inline structured report cards for security, SEO, health and other audits, with file and line evidence.

Inline bar, line, area and pie charts built from real site data.

Inline structured data tables.

Generate an image via OpenAI or xAI and save it to the media library.