High-risk tools in Crow
47 of the 587 tools in Crow are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
adguard_toggle_protectionExecuteEnable or disable AdGuard Home protection. Disabling stops ALL DNS filtering until re-enabled — clients will resolve via upstream with no blocking.
-
caddy_reloadExecuteValidate and apply the current Caddyfile via Caddy
-
changedetection_recheckExecuteTrigger an immediate recheck of one watch. Returns once the request is queued (the fetch may still be running).
-
crow_activate_serverExecuteActivate a server
-
crow_browser_block_requestsExecuteBlock requests whose URL contains any of the given substrings (ads/trackers/images) via raw CDP Fetch. Speeds pages up and lowers detection surface. Call with action=
-
crow_browser_capture_harExecuteStart or stop HAR (HTTP Archive) recording to capture all network requests. Useful for API discovery.
-
crow_browser_clickExecuteClick an element with position randomization for stealth.
-
crow_browser_downloadExecuteTrigger a file download by clicking an element, and save it to the host at ~/.crow/browser-downloads/. Uses a container bind mount + CDP download behavior.
-
crow_browser_evaluateExecuteExecute JavaScript in the page context and return the result.
-
crow_browser_extract_articleExecuteExtract a (possibly paywalled) article by trying a fallback ladder: live page → archive.today → Wayback → 12ft.io. Each candidate is loaded IN the stealth browser and parsed wit...
-
crow_browser_fill_formExecuteFill form fields with human-like typing. Accepts a map of selector -> value pairs.
-
crow_browser_launchExecuteStart/restart the browser and connect via CDP. Returns the VNC URL. Pass proxy_url to route through a proxy (recreates the container — set BEFORE navigating; save sessions first).
-
crow_browser_navigateExecuteNavigate to a URL. Waits for page load. Injects stealth scripts.
-
crow_browser_screenshotExecuteTake a screenshot of the current page or a specific element.
-
crow_browser_scroll_extractExecuteAuto-scroll an infinite-scroll / lazy-load page, collecting items each pass. Stops when no new items load or max_scrolls is hit.
-
crow_browser_set_headersExecuteSet extra HTTP headers (e.g. User-Agent, Referer) for all subsequent requests in this context. Apply BEFORE navigating.
-
crow_browser_wait_forExecuteWait for an element to reach a state (appear, hide, attach, detach). Robust alternative to fixed sleeps for flaky/dynamic pages.
-
crow_browser_wait_for_userExecutePause automation and display a message. Waits until the user signals to continue (call again with resume=true).
-
crow_campaign_publish_postExecuteImmediately publish a single post to Reddit. Requires confirmation.
-
crow_delegateExecuteHand off a LONG or BACKGROUND task to be done asynchronously by a Crow bot, returning
-
crow_generate_backgroundExecuteGenerate a new AI background image via SDXL Turbo. The image is set as the companion
-
crow_gis_create_geojsonExecuteGenerate GeoJSON from a SQL query result that includes lat/lng columns. Returns a FeatureCollection for use in maps.
-
crow_glasses_capture_photoExecuteAsk paired glasses to capture a still photo. Returns a hint string — the photo itself arrives asynchronously on the bundle
-
crow_glasses_confirm_continuous_recordingExecuteConfirm the user
-
crow_glasses_speakExecuteSend a text line to be spoken through paired glasses. Requires the user to have at least one glasses device paired and online. Returns a hint string only — the panel handles del...
-
crow_jellyfin_controlExecuteRemote control a Jellyfin playback session: play/pause, stop, seek, skip, volume
-
crow_kodi_controlExecuteTransport controls: play/pause, stop, seek, skip, volume. Use command + optional value.
-
crow_kodi_playExecutePlay a library item by ID, or a direct file/URL. Specify media_type + id for library items, or file for direct playback.
-
crow_media_listenExecuteGenerate or retrieve TTS audio for an article. Requires node-edge-tts package (npm install node-edge-tts).
-
crow_media_refreshExecuteTrigger an immediate feed refresh for one or all sources
-
crow_plex_controlExecuteTransport controls for Plex playback: play, pause, stop, skip, seek, volume
-
crow_plex_playExecuteStart playback of an item on a Plex client. Lists available clients if no client_id is provided.
-
crow_pm_ocr_noteExecuteRun handwriting OCR on a drawing note
-
crow_pm_sync_runExecuteRun one deterministic Monday.com sync pass over every board in the sync config (mirror boards pull into trackers; twoway boards three-way merge with the kanban tasks DB).
-
crow_schedule_botExecuteSchedule a Crow bot to run a goal on a recurring cron schedule. The result is delivered
-
crow_tax_calculateExecuteRun the full tax calculation and return a summary with audit trail.
-
crow_toolsExecuteRoute to external integration tools (Trello, Canvas, Slack, etc.) and remote Crow instances. Use crow_discover with category
-
crow_wmExecuteScreen control. ALWAYS call this tool when the user wants to: open/play/watch/search something, close a window, pause, resume, mute, or unmute. NEVER describe what you would do ...
-
fw_next_trackExecuteSkip to the next track in the album queue on the glasses. If no tracks remain, playback stops.
-
fw_pauseExecutePause the currently-playing audio stream on the glasses. Playback can be resumed with fw_resume.
-
fw_playExecutePlay a Funkwhale track on the paired glasses / phone speaker. Takes a track UUID from fw_search. Returns a streaming envelope that the meta-glasses voice loop intercepts; the LL...
-
fw_play_albumExecutePlay every track of an album sequentially through the paired glasses speaker. Takes the album
-
fw_resumeExecuteResume paused audio playback on the glasses.
-
fw_stop_playbackExecuteStop the currently-playing audio stream on the paired glasses and clear any queued tracks. This is a hard stop with no resume. For temporary pause, use fw_pause instead.
-
maker_start_guest_sessionExecuteMint an ephemeral guest session (no learner profile, no memories, no transcripts, no artifact save). 30-min cap. Returns a direct short URL + preview cookie (no redemption code ...
-
maker_start_sessionExecuteMint a new kiosk session for a learner and return a redemption code (NOT the raw token). The QR/URL carries the code; the token is issued as an HttpOnly cookie on redemption. Ad...
-
pt_media_pruneExecuteTrigger pruning of remote-cached video files older than N days. PeerTube runs this on a scheduled job; this forces an immediate pass. Admin-only. Rate-limited: 2/hour.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.