High-risk tools in EasyBits
47 of the 273 tools in EasyBits are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
agent_createExecute⚠️ DEPRECATED para cajas permanentes: usa
-
agent_messageExecuteSend a chat message to a persistent agent created via
-
agent_recordExecuteONE-SHOT: record a computer-use agent (template computer-ghosty-gemini) while it performs a task, and return a public URL to the resulting mp4. Internally: starts screen recordi...
-
agent_recording_startExecuteStart recording the desktop of a computer-use agent (computer-ghosty-gemini). ffmpeg captures display :0 to an mp4 inside the VM. One recording at a time per agent; calling agai...
-
agent_recording_stopExecuteStop the in-progress desktop recording and finalize the mp4. Returns { recording:false, id, url, bytes, durationMs } where
-
agent_runExecuteStart a managed Claude agent (Claude Agent SDK loop) inside a fresh Firecracker microVM. By default the agent has Bash/Read/Write/Edit/Glob/Grep/WebFetch (interactive/session to...
-
avatar_video_createExecuteTALKING HEAD video generator. Powered by fal.ai (SadTalker / Hallo2 / LivePortrait — OSS models, pay-per-use). Takes a portrait image + audio and returns an mp4 with the face mo...
-
call_createExecuteCrea una videollamada online y devuelve el link para compartir — no necesita nada previo. Levanta el servidor de llamadas, espera ~15s a que arranque, configura los puertos WebR...
-
call_recordExecuteInicia la grabación de una llamada en curso. Un chromium headless se une como observador invisible y ffmpeg captura el layout completo (cámaras + pantalla compartida) en 1080p. ...
-
db_execExecuteExecute multiple SQL statements in a batch (max 50). Useful for migrations or multi-step operations.
-
db_queryExecuteExecute a single SQL statement against a database. Supports SELECT, INSERT, UPDATE, DELETE, CREATE TABLE, etc. Use
-
deploy_machineExecutePublish the machine
-
get_page_screenshotExecuteTake a screenshot of a single document page. Returns a PNG image of one page (letter-sized). Requires Chrome installed locally — designed for Claude Code MCP usage.
-
ghosty_spawnExecuteSpawn THE default Ghosty agent — zero configuration. Uses EasyBits
-
goose_spawnExecuteSpawn THE managed Goose agent — zero configuration. Block
-
image_generateExecuteGenerate an image from a text prompt using fal.ai Flux models. Returns a public image URL ready to use in landings, documents, social posts, or as
-
launch_appExecutePut an app in production in ONE call — the
-
push_deployExecuteDeploy on every
-
redeploy_machineExecuteBuild a BRAND NEW machine from a release: provisions a box, unpacks the code, builds and starts it. Two jobs, one path — recovering a machine that died, and CHANGING TIER (there...
-
render_video_projectExecuteCompile the project to a HyperFrames composition and render it to MP4 on the owner
-
restart_machineExecuteRestart the app process with the CURRENT secrets and runspec. Seconds: it downloads nothing and builds nothing — unlike rollback_machine (fetches a release tarball) or redeploy_...
-
rollback_machineExecutePut a previous release back on the SAME machine: download, extract and restart. No build: a release published by launch_app ships its build. Use after a bad deploy. Data is unto...
-
run_toolExecuteDispatch any Easybits tool by name — even tools NOT loaded in the active toolGroup. Use this after
-
sandbox_adminExecuteAdmin passthrough to a permanent machine
-
sandbox_apply_patchExecuteAtomic hotfix in one call: apply N surgical edits, then optionally rebuild and restart the service. Edits run first and sequentially (a failing edit aborts before any build). If...
-
sandbox_createExecuteSpawn a Firecracker microVM sandbox. Returns sandboxId used for subsequent calls. Base templates: ubuntu, python, node, bun. Agent/harness templates: node-agent, claude-code, go...
-
sandbox_execExecuteExecute a shell command inside a sandbox. Returns stdout, stderr, exitCode, durationMs. Default timeout 60s, max 600s.
-
sandbox_exec_backgroundExecuteStart a long-running command in the background. Returns { execId, status } immediately instead of blocking like sandbox_exec. Poll with sandbox_exec_status; list with sandbox_ex...
-
sandbox_exec_killExecuteKill a background command started with sandbox_exec_background. Signals the whole process GROUP (SIGTERM, then SIGKILL after a grace period), so a dev server
-
sandbox_expose_portExecuteExpose a port running inside the sandbox as a public HTTPS URL (e.g. https://sb-<id>-<port>.sandboxes.easybits.cloud) — like E2B getHost / Daytona getPreviewLink. The unguessabl...
-
sandbox_expose_raw_portExecuteExpose a RAW layer-4 (TCP/UDP) port of the sandbox — the only way to reach a service that does not speak HTTP (SSH on 22, media/UDP). NOT needed for WebSocket: wss:// works over...
-
sandbox_forkExecuteBoot N copy-on-write children from a sandbox (fresh IP each, collision-free), to explore variations in parallel. Pass sandboxId to snapshot a live box then fork it (Morph-style ...
-
sandbox_git_checkoutExecuteSwitch branches in a sandbox repo. With create:true it uses
-
sandbox_git_cloneExecuteClone a git repo into a sandbox. For private repos pass
-
sandbox_git_pullExecutePull into a sandbox repo. Fast-forward only by default (pass rebase:true to rebase). Returns any conflicted paths so the agent can act on them instead of guessing.
-
sandbox_git_pushExecutePush a sandbox repo to its remote. Pass
-
sandbox_kernel_restartExecuteRestart the persistent Jupyter kernel for a
-
sandbox_resumeExecuteRestore a suspended sandbox from its snapshot (same TAP/IP/MAC/rootfs/volumes). The lifetime that remained when it was suspended is restored and the auto-destroy timer is re-arm...
-
sandbox_run_cellExecuteRun code in the sandbox
-
sandbox_run_codeExecuteRun a snippet of Python/Node/Bash inline (no need to write a file first). Output captured. Default lang=python. NOTE: each call runs a FRESH process (python3 -c / node -e / bash...
-
sandbox_runtimeExecuteControl the service daemon running inside the sandbox via systemd — no manual systemctl/npm through sandbox_exec. action=
-
sandbox_set_network_policyExecuteSet the EGRESS policy of one box: \
-
sandbox_ssh_enableExecuteGive the user SSH into the box, in one call: injects their public key(s) and restarts the box sshd. HAND THE USER
-
screenshot_urlExecuteVE cómo se ve una página: renderiza HTML (o una URL pública) en un Chromium real y devuelve la imagen como archivo público. Úsala para VERIFICAR tu propio trabajo — captura, pás...
-
service_startExecuteLevanta un servicio de flota on-demand y devuelve sus URLs. kind=
-
video_createExecuteGenerate a short video (2–10s) from a prompt. Automatically orchestrates: (1) cinematic prompt enhancement, (2) still generation — with character references if
-
web_searchExecuteweb_search
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.