High-risk tools in Desk

High severity Desk MCP Server 7 of 10 tools

7 of the 10 tools in Desk are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

click Execute

Click at screen coordinates.
double_click Execute

Double-click at screen coordinates.
key Execute

key
move_mouse Execute

Move mouse to coordinates without clicking.
right_click Execute

Right-click at screen coordinates (opens context menu).
scroll Execute

Scroll at screen coordinates.
type_text Execute

type_text

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Desk

Tools at high risk

Attacks that target this class

More on Desk

Enforce policy on every Desk tool call.