High-risk tools in Chrome Feedback
6 of the 16 tools in Chrome Feedback are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
chrome_click_elementExecuteClick on a DOM element using CSS selector
-
chrome_execute_scriptExecuteExecute JavaScript code in the current page
-
chrome_fill_inputExecuteFill text into an input field
-
chrome_interact_elementExecutePerform various interactions with DOM elements (click, hover, select, etc.)
-
chrome_navigate_to_urlExecuteNavigate the current browser tab to a specific URL
-
chrome_wait_for_elementExecuteWait for an element to appear on the page
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.