High-risk tools in Claude Mobile
83 of the 198 tools in Claude Mobile are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
appExecuteApp lifecycle: launch, stop, install, list
-
app_installExecuteInstall APK (Android) or .app bundle (iOS)
-
app_launchExecuteLaunch app by package name or bundle ID
-
app_restartExecuteForce-stop then re-launch an app. Common pattern for clearing in-memory state without uninstall.
-
app_stopExecuteForce stop an app
-
appstore_buildExecuteBuild a signed .ipa for TestFlight (auto-detects Flutter/React Native/KMP/Xcode projects).
-
appstore_submitExecuteSubmit a TestFlight build for external beta review (defaults to the latest VALID build).
-
appstore_uploadExecuteValidate then upload an .ipa to App Store Connect (TestFlight) via altool.
-
autopilotExecuteAI Test Autopilot. explore: auto-navigate app and build navigation graph. generate: create test scenarios from exploration. heal: self-heal broken test selectors. status: explor...
-
autopilot_exploreExecuteAutomatically navigate the app, building a navigation graph of screens and transitions. Uses screen fingerprinting to avoid revisiting screens.
-
autopilot_healExecuteSelf-heal a broken test step by finding the best matching element on the current screen. Uses fuzzy matching on text, resourceId, className, and bounds.
-
browserExecuteBrowser automation. open/close/list_sessions: session management. navigate/click/fill/fill_form/press_key: interaction. snapshot/screenshot: capture. evaluate: run JS. wait_for_...
-
browser_clickExecuteClick element by ref, selector, or text
-
browser_closeExecuteClose browser session
-
browser_evaluateExecuteExecute JavaScript in browser page
-
browser_navigateExecuteNavigate to URL or go back/forward/reload
-
browser_openExecuteOpen URL in browser session
-
browser_press_keyExecutePress keyboard key in browser
-
browser_wait_for_selectorExecuteWait for element to appear on page
-
clipboard_selectExecuteSelect all text in focused field (Android only)
-
debug_attachExecuteAttach the runtime debugger to a DEBUGGABLE running app. Android (JDWP): the package must have android:debuggable=true. iOS (LLDB Simulator): requires macOS + Xcode. Returns a s...
-
debug_breakExecuteSet a breakpoint. Android: {className, line} or {className, method} (method-entry, robust without line info). iOS: {file, line} or {method}. Returns { id, verified }. verified=f...
-
debug_detachExecuteDetach the debugger and end the session (the app keeps running). Also tears down the adb forward / LLDB daemon for this session.
-
debug_evalExecuteEvaluate an expression on a paused thread. Android: a local name,
-
debug_resumeExecuteResume all threads in the debugged VM/process. Use after inspecting a paused state to let the app continue running.
-
debug_set_varExecuteMutate a local variable on a paused thread. Android: primitives (int/long/bool/float/…), null, and strings; the value is coerced to the local
-
debug_stepExecuteStep the paused thread: OVER (next line), INTO (into call), or OUT (out of current method). Issues the step and resumes the thread; poll for STEP_HIT to see where execution landed.
-
desktopExecuteDesktop app management: launch (Gradle/bundle/attach), stop, windows, focus, resize, clipboard, performance, monitors, get_target_pid
-
desktop_focusExecuteFocus a desktop window
-
desktop_launchExecuteStart desktop automation and optionally launch an app. Supports three modes:
-
desktop_resizeExecuteResize a desktop window
-
desktop_stopExecuteStop running desktop application
-
deviceExecuteDevice management + module loading. list/set/set_target/get_target: devices. enable_module/disable_module/list_modules: load browser/desktop/store tools on demand.
-
flowExecuteFlow orchestration: batch (multi-command), run (multi-step automation with loops/conditionals), parallel (same action on multiple devices). Use turbo:true for rich feedback (exp...
-
flow_batchExecuteExecute multiple commands in one round-trip. Set turbo:true for UI context per step (experimental).
-
flow_parallelExecuteRun same action on multiple devices in parallel. Uses Promise.allSettled for concurrent execution.
-
flow_runExecuteMulti-step automation flow with conditionals, loops, error handling. Use for E2E testing instead of calling tools one-by-one. Set turbo:true for UI context per step (experimenta...
-
go_backExecutePress back button
-
inputExecuteInput actions. tap/double_tap/long_press: coords or text/id/label/index. swipe: direction or coords. text: type text. key: press key.
-
input_double_tapExecuteDouble tap by coordinates, text, resourceId, or index. Raw x/y are screenshot-space and auto-scaled to device coordinates — see input_tap description for full coordinate space r...
-
input_keyExecutePress hardware key (BACK, HOME, ENTER, etc.)
-
input_long_pressExecuteLong press at coordinates or on element by text/label. Raw x/y are screenshot-space and auto-scaled to device coordinates — see input_tap description for full coordinate space r...
-
input_swipeExecuteSwipe by direction or custom coordinates. Raw x1/y1/x2/y2 are screenshot-space and auto-scaled to device coordinates — see input_tap description for full coordinate space rules.
-
input_tapExecuteTap by coordinates, text, resourceId, label, or element index.\n\n
-
input_textExecuteType text into focused input field
-
intentExecuteIntent & Deep Link Engine. start: launch activity with extras. broadcast: send broadcast intent. deeplink: open deep link URI. services: list running services.
-
intent_broadcastExecuteSend an Android broadcast intent. Useful for triggering system events or communicating with broadcast receivers. Android only.
-
intent_deeplinkExecuteOpen a deep link URI on Android or iOS. On Android uses
-
intent_startExecuteLaunch an Activity with a structured Android Intent. Supports action, component, data URI, category, typed extras, and activity flags. Android only; use intent_deeplink for iOS.
-
launch_appExecuteLaunch app
-
networkExecuteNetwork Layer. traffic: app network traffic stats. connectivity: connection type/state. proxy: get/set HTTP proxy. airplane: toggle airplane mode.
-
network_airplaneExecuteEnable or disable airplane mode on the Android device.
-
performanceExecutePerformance & Crash Monitor. snapshot: collect current metrics. baseline: save metrics for comparison. compare: PASS/FAIL against baseline. monitor: continuous sampling over dur...
-
permission_grantExecuteGrant app permission (Android runtime / iOS privacy)
-
press_keyExecutePress key
-
recorder_playExecuteReplay a saved scenario. Executes all steps sequentially with optional speed/timeout control.
-
recorder_startExecuteBegin recording user interactions as a test scenario
-
repl_expectExecuteBlock until a prompt regex matches, the session idles, the child exits, or the timeout fires.
-
repl_keyExecuteSend a named key to a session. Editing/navigation for driving TUIs.
-
repl_resizeExecuteResize the PTY and vt100 grid for a live session.
-
repl_sendExecuteWrite text to a REPL session. Appends a newline by default.
-
repl_spawnExecuteStart an interactive REPL or CLI process under a PTY. Returns the session id.
-
sensorExecuteSensor & Environment Simulation. location: set GPS coordinates. battery: set battery level/status. notifications: read notification shade. thermal: set thermal status.
-
sensor_locationExecuteSet GPS location on device. Android emulator: uses
-
sensor_thermalExecuteOverride Android thermal status (API 29+ / Android 10+). Simulates device overheating scenarios. Use reset:true to restore real thermal state. iOS: not supported.
-
store_halt_rolloutExecuteHalt staged rollout on Google Play
-
swipeExecuteSwipe in a direction
-
syncExecuteMulti-device sync testing. create_group: bind devices to roles. run: coordinated steps with barriers. assert_cross: act on A, verify on B. status: group details. list: all group...
-
sync_assert_crossExecuteCross-device assertion: perform action on source device, verify result on target device with retries.
-
sync_runExecuteExecute coordinated steps across devices with barrier synchronization.
-
systemExecuteSystem operations, clipboard, permissions, files. shell: run command. logs: device logs. clipboard_*: Android clipboard. permission_*: app permissions. file_*: Aurora file trans...
-
system_open_urlExecuteOpen URL in device browser
-
system_shellExecuteExecute a shell command on the device. SECURITY: shell metacharacters
-
system_waitExecuteWait for specified duration (ms)
-
tapExecuteTap at x,y
-
tap_textExecuteFind and tap element by text
-
type_textExecuteType into focused field
-
uiExecuteUI inspection and interaction. tree: accessibility tree. find: search elements. find_tap: fuzzy tap (Android). tap_text: tap by text (Desktop). analyze: screen analysis. wait/as...
-
ui_find_tapExecuteFuzzy tap by natural language element description (Android only). When the matched element is a non-clickable label (common in grid/list items where the parent ViewGroup owns th...
-
ui_tap_textExecuteTap element by text via Accessibility API (Desktop/macOS only)
-
ui_waitExecuteWait for UI element to appear (polling with timeout)
-
visual_suiteExecuteRun visual comparison for all baselines matching filters (batch regression check)
-
waitExecuteWait milliseconds
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.