High-risk tools in Agent Browser
11 of the 20 tools in Agent Browser are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
cdp_batchExecuteRun a CDP bridge batch command; pass the full JSON command object as text.
-
cdp_commandExecuteCall a single Chrome DevTools Protocol command on the current or specified tab.
-
execute_jsExecuteExecute arbitrary JS in the current page context or send JSON CDP bridge commands through the page bridge.
-
hotkeyExecuteSend a hotkey chord like
-
mouse_clickExecuteClick on the real desktop at screen coordinates.
-
mouse_dragExecuteDrag the real mouse from one point to another.
-
mouse_moveExecuteMove the real mouse cursor to screen coordinates.
-
open_new_tabExecuteOpen a new browser tab with the given URL.
-
open_urlExecuteNavigate the current tab to a URL using real-browser JS navigation.
-
switch_tabExecuteSet the active browser tab by session id or URL substring.
-
type_textExecuteType text via the real keyboard, optionally after clicking a field.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.