High-risk tools in Executor Mcp Roblox
24 of the 291 tools in Executor Mcp Roblox are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
agent-runExecuteORCHESTRATES LIVE TOOLS. Execute an explicit discover→act→verify workflow with step IDs, result references,
-
batch-executeExecuteRun several independent Luau snippets in sequence in a single round trip, collecting every result without paying
-
build-call-graphExecuteBuild an IDA-style call graph (function tree) rooted at a target Luau function. Each Luau function carries its
-
ensure-remote-spyExecuteWRITES LIVE GAME STATE. Starts the selected engine (default cobalt), stopping the other spy on this client first. Cobalt is bundled; Ketamine is downloaded from a pinned upstrea...
-
executeExecuteExecute Luau in the active Roblox client WITHOUT waiting for it to finish. The code is COMPILED FIRST via
-
execute-and-waitExecuteRun Luau in the active Roblox client and WAIT for what happened, returning a structured result:
-
execute-fileExecuteRead a Luau script from the SERVER host filesystem and execute its contents on the active Roblox client,
-
execute-lua-stateExecuteWRITES LIVE GAME STATE. Resolve current/game/expression state and call LuaStateProxy:Execute(source, ...args).
-
filter-gcExecuteThe headline reflection tool: run the executor
-
fire-proximity-promptExecuteWRITES LIVE GAME STATE. Resolve a Luau expression to a ProximityPrompt and trigger it via the executor
-
invoke-closureExecuteWRITES LIVE GAME STATE. Invoke an arbitrary live function expression with up to 24 typed arguments and return
-
invoke-methodExecuteACTS ON LIVE GAME STATE. Resolve a Luau expression to an Instance and call one of its methods as a colon-call
-
new-c-closureExecuteCall newcclosure(function, debugName?) and store the wrapper under getgenv().__mcp_closure_refs, returning a
-
new-l-closureExecuteCall newlclosure(function) and store the wrapper under getgenv().__mcp_closure_refs, returning a reusable
-
new-lua-state-proxyExecuteCall LuaStateProxy.new() and return serializable state metadata plus a retained Reference; no raw proxy crosses JSON.
-
playbook-runExecuteLoad a saved playbook from ~/.executor-mcp/playbooks/<name>.json, replace any ${param} placeholders with
-
run-deferredExecuteSchedule a Luau snippet to run on its OWN thread and return immediately WITHOUT waiting for it to finish. Use
-
run-loopExecuteRun a Luau snippet
-
run-luauExecuteExecute arbitrary Luau in the active Roblox client and return its first returned value (decoded from JSON).
-
run-on-actorExecuteWRITES LIVE GAME STATE. Resolve an Actor expression and call run_on_actor(actor, source, ...arguments). The
-
run-with-timeoutExecuteRun a Luau snippet under a WATCHDOG: it executes on its own thread and this tool polls a done flag against an
-
scriptExecuteRun a Luau program in the active Roblox client that can ALSO call any other tool inline through a live
-
script-fanoutExecuteRun ONE Luau program across multiple connected clients in parallel and return per-client results. Targets
-
trace-remote-trafficExecuteWRITES LIVE GAME STATE on start. Starts/adopts the selected engine and opens a traffic view. fetch reads retained captures since start; stop closes only the view. Direction is s...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.