High-risk tools in Adobe Mcp Suite
18 of the 447 tools in Adobe Mcp Suite are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
illustrator_execute_codeExecuteIllustrator: Run your own ExtendScript in Illustrator and return its last expression. It runs unrestricted: it can change or delete anything and read or write files. Prefer the ...
-
illustrator_execute_menu_commandExecuteIllustrator: Run an Illustrator menu command by its executeMenuCommand name (e.g. "outline" = Type > Create Outlines, "expandStyle" = Object > Expand Appearance). Illustrator re...
-
illustrator_new_from_templateExecuteIllustrator: Start an untitled document from an Illustrator template (.ait) file (File > New from Template). The template itself is not changed
-
illustrator_organize_layersExecuteIllustrator: Run a Layers panel menu command: merge layers (Merge Selected), flatten every layer into one (Flatten Artwork), collect items or layers in a new layer (Collect in N...
-
illustrator_path_operationExecuteIllustrator: Run an Object > Path command on the targets: outline_stroke (stroke to filled shape), join (connect open paths' end points), add_anchor_points (one between each pai...
-
illustrator_place_imageExecuteIllustrator: Place an image or other file at x, y on an artboard, linked or embedded (File > Place): PNG, JPEG, JPEG 2000, TIFF, PSD, GIF, BMP, WebP, AVIF, HEIC, TGA, PCX, PXR, ...
-
illustrator_play_actionExecuteIllustrator: Play an action from a loaded set (Actions panel > Play Current Selection). The action acts on the active document and its selection; give target to select items fir...
-
illustrator_repeat_transformExecuteIllustrator: Repeat the last transformation on the targets (Object > Transform > Transform Again), count times. It repeats what Illustrator recorded as the last move, scale, rot...
-
illustrator_run_batchExecuteIllustrator: Play an action on every file in a folder, or on every data set of the active document, and save the results (does what Actions panel > Batch does, by script). Folde...
-
illustrator_run_image_commandExecuteIllustrator: Run an Object menu image command on the targets: remove_background (Object > Remove Background, Illustrator 30.4 and later: keeps the subject of an image), make_moc...
-
illustrator_run_script_fileExecuteIllustrator: Run a script file (File > Scripts > Other Script, or a script installed in File > Scripts given by its path): .jsx, .js or .jsxbin. Like execute_illustrator_code it...
-
illustrator_run_type_commandExecuteIllustrator: Run a Type or Edit menu command that opens no dialog: convert_bullets_to_text (Type > Bullets and Numbering > Convert to text, on the targets), show_hidden_characte...
-
illustrator_scale_itemsExecuteIllustrator: Scale items by a percentage. Give scale for uniform scaling, or scaleX and scaleY
-
illustrator_transform_eachExecuteIllustrator: Scale, move, rotate and flip each item around its own reference point (Object > Transform > Transform Each). With random, each item gets a random amount between non...
-
illustrator_transform_patternExecuteIllustrator: Move, scale, rotate, reflect or shear the pattern inside objects without changing the objects (like the Transform options with Transform Objects off and Transform P...
-
indesign_execute_codeExecuteInDesign: Execute custom InDesign ExtendScript code
-
indesign_navigate_to_pageExecuteInDesign: Navigate to a page: make it the active page of the document's layout window
-
indesign_preflight_documentExecuteInDesign: Run a preflight check on the active document with a preflight profile and list the problems found (optionally saving a report)
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.