High-risk tools in Adobe Mcp Illustrator
15 of the 306 tools in Adobe Mcp Illustrator are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
execute_illustrator_codeExecuteRun your own ExtendScript in Illustrator and return its last expression. It runs unrestricted: it can change or delete anything and read or write files. Prefer the specific tools
-
execute_menu_commandExecuteRun an Illustrator menu command by its executeMenuCommand name (e.g.
-
new_from_templateExecuteStart an untitled document from an Illustrator template (.ait) file (File > New from Template). The template itself is not changed
-
organize_layersExecuteRun a Layers panel menu command: merge layers (Merge Selected), flatten every layer into one (Flatten Artwork), collect items or layers in a new layer (Collect in New Layer), gi...
-
path_operationExecuteRun an Object > Path command on the targets: outline_stroke (stroke to filled shape), join (connect open paths\
-
place_imageExecutePlace an image or other file at x, y on an artboard, linked or embedded (File > Place): PNG, JPEG, JPEG 2000, TIFF, PSD, GIF, BMP, WebP, AVIF, HEIC, TGA, PCX, PXR, PDF (a chosen...
-
play_actionExecutePlay an action from a loaded set (Actions panel > Play Current Selection). The action acts on the active document and its selection; give target to select items first. Steps run...
-
repeat_transformExecuteRepeat the last transformation on the targets (Object > Transform > Transform Again), count times. It repeats what Illustrator recorded as the last move, scale, rotate, reflect,...
-
run_batchExecutePlay an action on every file in a folder, or on every data set of the active document, and save the results (does what Actions panel > Batch does, by script). Folder: each .ai, ...
-
run_image_commandExecuteRun an Object menu image command on the targets: remove_background (Object > Remove Background, Illustrator 30.4 and later: keeps the subject of an image), make_mockup (Object >...
-
run_script_fileExecuteRun a script file (File > Scripts > Other Script, or a script installed in File > Scripts given by its path): .jsx, .js or .jsxbin. Like execute_illustrator_code it runs unrestr...
-
run_type_commandExecuteRun a Type or Edit menu command that opens no dialog: convert_bullets_to_text (Type > Bullets and Numbering > Convert to text, on the targets), show_hidden_characters (Type > Sh...
-
scale_itemsExecuteScale items by a percentage. Give scale for uniform scaling, or scaleX and scaleY
-
transform_eachExecuteScale, move, rotate and flip each item around its own reference point (Object > Transform > Transform Each). With random, each item gets a random amount between none and the val...
-
transform_patternExecuteMove, scale, rotate, reflect or shear the pattern inside objects without changing the objects (like the Transform options with Transform Objects off and Transform Patterns on, o...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.