High-risk tools in Deepadb
72 of the 205 tools in Deepadb are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
adb_a11y_auditExecuteRun an automated accessibility audit on the current screen. Checks for: missing labels on interactive elements, undersized touch targets (<48dp), images without content-descript...
-
adb_airplane_cycleExecuteCycle airplane mode on then off after a delay. Forces cellular re-registration — useful for radio diagnostics and network testing.
-
adb_airplane_modeExecuteToggle airplane mode on/off. Useful for resetting cellular registration during radio testing.
-
adb_at_batchExecuteSend multiple AT commands sequentially and capture all responses. Useful for running a diagnostic sequence. Requires root.
-
adb_at_probeExecuteRun a standard AT diagnostic probe: modem identification, signal quality, network registration, SIM status, and supported bands. Requires root.
-
adb_at_sendExecuteSend a single AT command to the modem and capture the response. Requires root. Use adb_at_detect to find the correct port, or specify it manually.
-
adb_batch_actionsExecuteExecute multiple input actions in a single tool call. Reduces ADB round-trips for multi-step UI interactions. Each action runs sequentially with an optional delay between them. ...
-
adb_build_and_installExecuteBuild a debug APK and install it on the connected device (convenience wrapper)
-
adb_ci_run_testsExecuteRun Android instrumented tests (androidTest) via
-
adb_ci_wait_bootExecuteWait for a device or emulator to fully boot. Polls sys.boot_completed and waits for the launcher to be ready. Essential for CI pipelines.
-
adb_connectExecuteConnect to a device over WiFi/TCP. Device must be paired first or have TCP/IP enabled.
-
adb_disconnectExecuteDisconnect from a wireless device, or all wireless devices if no host specified
-
adb_dumpsysExecuteRun dumpsys for a specific service. Use
-
adb_emulator_startExecuteLaunch an Android Virtual Device (AVD) emulator. Returns once the emulator process has started.
-
adb_emulator_stopExecuteStop a running emulator. Uses
-
adb_farm_runExecuteRun tests on Firebase Test Lab. Uploads an APK and test APK, executes instrumented tests across specified device models and API levels. Requires gcloud CLI authenticated with a ...
-
adb_file_chmodExecuteChange file permissions on the device. Mode must be a valid octal string (e.g.,
-
adb_file_chownExecuteChange file ownership on the device. Requires root. Supports both numeric UID:GID (e.g.,
-
adb_force_stopExecuteForce-stop an app immediately. The most common debugging action.
-
adb_forwardExecuteForward a local port to a port on the device (host → device). Use for connecting to services running on the device.
-
adb_gradleExecuteRun a Gradle task in an Android project directory
-
adb_inputExecuteSend input events to the device (tap, swipe, text, keyevent)
-
adb_input_double_tapExecuteDouble tap at a point on screen. Triggers zoom, text selection, or double-tap gestures. Two rapid taps with a configurable interval.
-
adb_input_dragExecuteDrag from one point to another on screen. Uses Android
-
adb_input_flingExecutePerform a high-velocity fling gesture. Like swipe but with a short duration to create scroll momentum on lists, launchers, and paged views. Useful for fast-scrolling through lon...
-
adb_input_long_pressExecuteLong press at a point on screen. Triggers context menus, selection mode, drag handles, and other long-press behaviors. Implemented as a zero-distance swipe with configurable hol...
-
adb_input_pinchExecutePerform a multi-touch pinch (zoom out) or spread (zoom in) gesture. Two fingers move symmetrically toward or away from a center point. Uses parallel swipe injection by default (...
-
adb_input_textExecuteType text on the device. Handles special characters by converting spaces to %s and escaping shell metacharacters. For multi-line or complex text, consider using the clipboard to...
-
adb_installExecuteInstall an APK on the device. Provide the full local path to the APK file.
-
adb_logcat_startExecuteStart a background logcat watcher. Lines accumulate in a ring buffer. Use adb_logcat_poll to retrieve new entries.
-
adb_logcat_stopExecuteStop a running logcat watcher session
-
adb_market_installExecuteDownload and install a workflow from the marketplace. Saves to the workflows directory for immediate use with adb_workflow_run.
-
adb_mirror_startExecuteStart live screen mirroring for a device using scrcpy. Requires scrcpy installed and on PATH. Supports windowed (visual) and headless (no display) modes. One session per device.
-
adb_mirror_stopExecuteStop an active scrcpy mirroring session for a device.
-
adb_multi_compareExecuteRun a command on all devices and compare outputs side by side. Highlights differences across devices.
-
adb_multi_installExecuteInstall an APK on multiple (or all) connected devices in parallel.
-
adb_multi_shellExecuteExecute a shell command on multiple (or all) connected devices in parallel. Returns results grouped by device.
-
adb_multi_testExecuteRun a comparative test workflow across all connected devices (host + QEMU guests). Executes a predefined diagnostic profile or custom command list on every device in parallel, c...
-
adb_network_auto_connectExecuteDiscover and automatically connect to ADB devices on the local network. Combines network scanning with adb connect in one step. Probes a single port (default 5555) on each candi...
-
adb_network_scanExecuteScan the local network for Android devices with ADB enabled over WiFi/TCP. Probes common ADB ports (5555-5558) on hosts from the ARP table and optionally a custom IP range. Disc...
-
adb_open_urlExecuteOpen a URL on the device in the default browser or handling app. Uses Android
-
adb_pairExecutePair with a device over WiFi using the pairing code from Developer Options → Wireless debugging → Pair device
-
adb_qemu_connectExecuteConnect to a running QEMU VM
-
adb_qemu_disconnectExecuteDisconnect from a QEMU VM
-
adb_qemu_guest_shellExecuteExecute a shell command on a QEMU guest VM via ADB. The VM must be connected first (use adb_qemu_connect). The guest serial is derived internally — no user-supplied host/IP reac...
-
adb_qemu_setupExecuteCheck and install QEMU for on-device virtualization. Verifies KVM availability, checks if QEMU is installed, reports version info, and can install QEMU via Termux package manage...
-
adb_qemu_startExecuteBoot a QEMU virtual machine with KVM hardware acceleration. Auto-detects optimal resource allocation: uses total cores minus 1 for the VM (reserving one for the host OS), and up...
-
adb_qemu_stopExecuteStop a running QEMU virtual machine. Sends SIGTERM for graceful shutdown, with force kill option.
-
adb_rebootExecuteReboot the device. Supports normal, recovery, and bootloader modes.
-
adb_restart_appExecuteForce-stop then re-launch an app. The most frequent debugging workflow in a single call.
-
adb_reverseExecuteReverse-forward a device port to a port on the host (device → host). Use for letting device apps reach services on your machine.
-
adb_revoke_permissionExecuteRevoke a runtime permission from a package. Useful for resetting permission state to test first-run flows or denial handling.
-
adb_ril_startExecuteStart capturing RIL (Radio Interface Layer) messages from the radio logcat buffer. Captures network registration, cell info, signal strength, authentication, handover, and NAS e...
-
adb_ril_stopExecuteStop a RIL capture session. Shows a summary of captured message categories.
-
adb_root_shellExecuteExecute a command as root via su. Requires rooted device.
-
adb_screenExecuteControl screen state: wake, sleep, toggle, lock, or unlock. Lock and unlock verify actual keyguard state via dumpsys window. Unlock uses wm dismiss-keyguard (works for swipe key...
-
adb_screenrecord_startExecuteStart recording the device screen. Recording runs on-device. Use adb_screenrecord_stop to finish and pull the video file.
-
adb_screenrecord_stopExecuteStop an active screen recording and pull the video file locally. If the recording has already finished (hit time limit), this just pulls the file.
-
adb_scroll_untilExecuteScroll the screen repeatedly until a target element is found. Performs a swipe gesture, then checks the UI hierarchy for the target. Repeats until found or max iterations reache...
-
adb_shellExecuteExecute a shell command on the Android device. Returns stdout and stderr.
-
adb_start_activityExecuteStart an activity or app by intent or component name
-
adb_start_appExecuteLaunch an app by package name (resolves and starts the default launcher activity)
-
adb_tap_elementExecuteFind a UI element by text, resource-id, or content-description, then tap its center. Combines UI hierarchy search with input tap in one atomic operation. More reliable than coor...
-
adb_tcpdump_startExecuteStart a packet capture on the device using tcpdump. Requires root or tcpdump binary on device. Capture runs in background.
-
adb_tcpdump_stopExecuteStop an active packet capture and pull the pcap file locally for analysis.
-
adb_tcpipExecuteSwitch a USB-connected device to TCP/IP mode on the specified port (default 5555). After this, you can disconnect USB and use adb_connect.
-
adb_test_gen_from_uiExecuteAnalyze the current screen and generate a test workflow that taps each interactive element, takes screenshots, and verifies the app doesn
-
adb_tunnel_openExecuteOpen a managed tunnel between host and device. Higher-level convenience wrapper over adb_forward / adb_reverse: auto-picks a free host port when one isn
-
adb_wait_elementExecuteWait for a UI element to appear or disappear. Polls the UI hierarchy at regular intervals until the condition is met or timeout expires. Useful for waiting after navigation, ani...
-
adb_wait_stableExecuteWait for the UI to stabilize. Polls the UI hierarchy and waits until consecutive dumps produce the same element count and structure. Useful after screen transitions, animations,...
-
adb_wifiExecuteEnable or disable WiFi
-
adb_workflow_runExecuteExecute a workflow — a JSON-defined sequence of device operations with variable substitution, conditional steps, and loop support. Supported actions: shell, root_shell, install,...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.