High-risk tools in Chrome Devtools
24 of the 50 tools in Chrome Devtools are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
clickExecuteClicks on the provided element
-
click_atExecuteClicks at the provided coordinates
-
dragExecuteDrag an element onto another element
-
emulateExecuteEmulates various features on the selected page.
-
evaluateExecuteEvaluates a JavaScript script
-
evaluate_scriptExecuteEvaluate a JavaScript function inside the currently selected page${cliArgs?.categoryExtensions ?
-
execute_3p_developer_toolExecuteExecutes a tool exposed by the page.
-
execute_webmcp_toolExecuteExecutes a WebMCP tool exposed by the page.
-
fill_formExecuteFill out multiple form elements (inputs, selects, checkboxes, radios) at once. ALWAYS prefer this tool over multiple individual
-
handle_dialogExecuteIf a browser dialog was opened, use this command to handle it
-
hoverExecuteHover over the provided element
-
install_extensionExecuteInstalls a Chrome extension from the given path.
-
lighthouse_auditExecuteGet Lighthouse score and reports for accessibility, SEO, best practices, and agentic browsing. This excludes performance. For performance audits, run ${startTrace.name}
-
navigateExecuteLoads a URL
-
performance_start_traceExecuteStart a performance trace on the selected webpage. Use to find frontend performance issues, Core Web Vitals (LCP, INP, CLS), and improve page load speed.
-
performance_stop_traceExecuteStop the active performance trace recording on the selected webpage.
-
press_keyExecutePress a key or key combination. Use this when other input methods like fill() cannot be used (e.g., keyboard shortcuts, navigation keys, or special key combinations).
-
reload_extensionExecuteReloads an unpacked Chrome extension by its ID.
-
resize_pageExecuteResizes the selected page
-
screencast_stopExecuteStops the active screencast recording on the selected page.
-
select_pageExecuteSelect a page as a context for future tool calls.
-
trigger_extension_actionExecuteTriggers the default action of an extension by its ID.
-
type_textExecuteType text using keyboard into a previously focused input
-
wait_forExecuteWait for the specified text to appear on the selected page.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.