High-risk tools in Libi
32 of the 215 tools in Libi are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
compose_musicExecuteTest-mode ElevenLabs mirror.
-
isolate_audioExecuteTest-mode ElevenLabs mirror.
-
libi.analysis_extract_audioExecuteSTOP — before any audio analysis you MUST invoke the
-
libi.analysis_transcribe_audioExecuteRun the full transcript pipeline server-side: extract audio, chunk if needed (10-min default), transcribe per chunk, save each chunk row, auto-aggregate. Provider defaults to lo...
-
libi.cancel_jobExecuteRequest graceful cancellation of a running background job. Partial
-
libi.compute_object_trackExecuteSTOP — before using this you MUST invoke the
-
libi.compute_track_segmentExecuteSTOP — invoke the
-
libi.create_sceneExecuteCreate a new scene in the video composition. The drawFunction is JavaScript code that receives a
-
libi.dev_slow_jobExecuteDEV ONLY: run a deterministic slow background job that ticks once per second. Used to verify chat tool-call UI (progress, stop, ETA). Call with different
-
libi.export_videoExecuteExport the piece
-
libi.highlight_effectExecuteGuided edit: flash an effect for the user — a catalog effect (opens the effects panel to that family/phase and flashes the thumbnail) or an effect already applied to a layer
-
libi.highlight_propertyExecuteGuided edit: flash a specific inspector field for an overlay so the user sees exactly which control to change. Pass the overlay id and a known property key (e.g.
-
libi.install_effect_from_gitExecuteInstall a custom animation effect package from a git repo (must contain manifest.json + animate.js). The animate body is sandbox-validated before persisting; a poison package is...
-
libi.list_identity_candidatesExecuteSTOP — invoke the
-
libi.music_install_analysis_depsExecuteOne-shot uv prefetch of the librosa env. Called from the local-music install plan,
-
libi.music_profileExecuteRun local librosa to extract a music profile: tempo, key, energy, brightness,
-
libi.override_instructionsExecuteDISCOURAGED — prefer libi.update_memories for behavior changes. Replaces the BASE agent instructions with a user-owned editable copy (like forking a bundled skill). Use ONLY whe...
-
libi.regenerate_proxyExecuteForce regeneration of a video file
-
libi.remove_backgroundExecuteSTOP — before using this you MUST invoke the
-
libi.render_overlay_framesExecuteRender a few REAL composition frames (base video + all overlays, including WebGL 3D
-
libi.restart_acp_sessionExecuteReload the entire ACP session — all bundled MCPs come down and back up. Use this only when you don
-
libi.restart_mcp_serverExecuteRestart a specific bundled MCP server. Use after fixing an issue diagnose_mcp surfaced (e.g. installed a missing binary, set an API key). Returns immediately; the restart happen...
-
libi.retry_mcp_serverExecuteRe-probe an external MCP server and refresh its serverStatus. Use when list_bundled_mcps reports serverStatus !==
-
libi.show_mcp_settingsExecuteNavigate the user to the MCPs & Skills page (MCP Servers tab), optionally focusing a specific bundled server card by id (e.g.
-
libi.show_previewExecuteSwitch the editor to the Preview tab (canvas player + timeline) for a piece. Use when the timeline should be the focus — e.g. after creating a piece, or when the user asks to se...
-
libi.sleepExecuteSleep for N seconds inside the MCP server. Use BETWEEN long-running polls — e.g. after submitting a fal-ai job, sleep 20 s before calling check_job again. AbortSignal-aware: age...
-
libi.verify_tracked_overlayExecuteSTOP — invoke the
-
run_modelExecuteTest-mode fal mirror (sync placeholder).
-
submit_jobExecuteTest-mode fal mirror.
-
text_to_sound_effectsExecuteTest-mode ElevenLabs mirror.
-
text_to_speechExecuteTest-mode ElevenLabs mirror.
-
voice_cloneExecuteTest-mode ElevenLabs mirror.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.