Tools, Permissions, and Risk
How to declare required tools and permissions, and how risk is calculated.
Required tools (required_tools) can only be chosen from the list the registry supports — declaring a value that isn't on the list gets publishing rejected.
Permissions (permissions) are meant to be chosen from a recommended set — internet read, file read/write, run Python, call external APIs, and so on — but other values are still allowed to register and are shown as "unsupported."
You can't set risk level yourself
Risk level is calculated automatically by the server based on the permissions and required tools you select. The publish form has no field for choosing a risk level — running Preview shows you the calculated result along with the factors behind it.