Critical-risk tools in Libi
26 of the 215 tools in Libi are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
libi.analysis_remove_stepDestructiveDelete an analysis step row (and any cascaded keyframes if kind=frames). Use to fully clear and redo a step.
-
libi.audio_remove_clipDestructiveRemove an audio clip FROM THE TIMELINE (composition manifest only). The source file on disk is NOT deleted — it stays in resources, and the user can re-add it. For a linked (inl...
-
libi.clear_layer_effectDestructiveRemove the effect on a layer
-
libi.delete_asset_folderDestructiveDelete an asset folder. mode
-
libi.delete_caption_styleDestructiveDelete a user-created caption style by id. Bundled curated styles cannot be deleted (returns
-
libi.delete_characterDestructiveRemove a character from the catalog. Mappings to assets are cascade-removed; assets themselves are kept unless
-
libi.delete_clipDestructiveDelete a timeline clip — a scene, overlay, or audio clip (auto-detected from
-
libi.delete_fileDestructivePERMANENTLY DELETE a source file from disk. This is the ONLY destructive path in the system — the file is unrecoverable, and every scene, audio clip, and overlay referencing it ...
-
libi.delete_folderDestructiveDelete a folder. mode
-
libi.delete_itemDestructiveRemove an item from the catalog. Mappings to assets are cascade-removed; assets themselves are kept unless
-
libi.delete_keyframeDestructiveRemove the keyframe at
-
libi.delete_overlay_presetDestructiveDelete a user-saved overlay preset.
-
libi.delete_pieceDestructivePermanently delete a piece and ALL of its data — every file (originals,
-
libi.delete_sceneDestructiveRemove a scene FROM THE TIMELINE (composition manifest only). The source file is NOT deleted — it stays in resources, and the scene can be recreated. Any linked audio clip for t...
-
libi.delete_trackDestructiveDelete a track (DB row + JSON sidecar). Tracked overlays that reference this trackId will fail to render until they
-
libi.discard_draftDestructiveDrops the draft and returns the piece to the snapshot state. Destructive — requires confirm:true.
-
libi.drop_proxiesDestructiveDelete preview proxies for every video on the piece to free disk space. Proxies regenerate on next edit session.
-
libi.invalidate_model_schema_cacheDestructiveDrop a cached endpoint schema. Call this when a generation fails because the cached schema was wrong, then re-fetch.
-
libi.remove_effectDestructiveDelete a custom effect package by id.
-
libi.remove_mcp_serverDestructivePermanently remove a custom MCP server. Bundled servers cannot be removed — use libi.set_mcp_server_enabled to disable them.
-
libi.remove_overlayDestructiveRemove an overlay (any kind) from the composition by id.
-
libi.remove_skillDestructiveDelete a user skill, or delete an override (which restores the bundled skill). Bundled skills cannot be deleted; use libi.set_skill_enabled to disable them, or libi.update_skill...
-
libi.remove_skill_promptDestructiveDelete prompts/<name>.md from a USER skill.
-
libi.restore_snapshotDestructivePromotes one of the prior snapshots (from getPieceState.recentSnapshots) to become the current snapshot. The current snapshot is archived to history. Destructive — requires conf...
-
libi.compute_object_track_providersFinancialOPTIONAL PAID mask refinement via fal.ai SAM2. NOT the default tracker — use
-
libi.extra_analysis_modelFinancialPAID. Runs a provider-driven (fal.ai → Gemini 2.5 Pro by default) full-video analysis and returns a structured production script (shots, music, sound design) — designed for feed...
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.