High-risk tools in OScribe
19 of the 24 tools in OScribe are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
os_browser_restart_with_cdpExecuteRestart Chromium browser (Chrome, Edge, Brave, Arc) with Chrome DevTools Protocol (CDP) enabled. Also works for CEF apps (Epic Games Launcher, Unreal Engine apps) — automaticall...
-
os_clickExecuteClick at current cursor position. Use os_move first to position the cursor, then os_click to click. This ensures precise clicking by separating movement and click.
-
os_click_atExecuteClick at specific screen coordinates (moves and clicks in one action). Prefer using os_move + os_click for more precise control.
-
os_dragExecutePerform a drag-and-drop operation: moves to start position, holds mouse button, smoothly drags to destination, then releases. Use this for moving files, reordering items, resizi...
-
os_focusExecuteFocus a window by title or app name
-
os_hotkeyExecutePress a keyboard shortcut
-
os_mouse_downExecutePress and hold mouse button at current cursor position. For drag-and-drop, prefer os_drag which handles the complete operation. Use os_mouse_down + os_move + os_mouse_up only fo...
-
os_mouse_upExecuteRelease mouse button at current cursor position. Use after os_mouse_down to complete manual drag operations. For simple drag-and-drop, prefer os_drag instead.
-
os_moveExecuteMove mouse cursor to specific coordinates
-
os_nvda_installExecuteDownload and install NVDA portable for Electron app accessibility. Windows only.
-
os_nvda_startExecuteStart NVDA screen reader in silent mode. Required for Electron app accessibility. Windows only.
-
os_nvda_stopExecuteStop NVDA screen reader. Windows only.
-
os_scrollExecuteScroll in a direction
-
os_system_uiExecuteGet all Windows system UI elements (taskbar, Start button, system tray, desktop icons, action center, widgets). Use this to interact with OS-level UI independently of applicatio...
-
os_typeExecuteType text using the keyboard
-
os_unity_setupExecuteAutomatically set up the Unity Bridge for any Unity Mono game (Windows & macOS). This tool automates the full pipeline: 1. **Detect**: Analyzes the game folder (runtime, DLLs, ...
-
os_voiceover_startExecuteStart VoiceOver screen reader in silent mode (no audio). Required for Electron app accessibility. macOS only.
-
os_voiceover_stopExecuteStop VoiceOver screen reader. macOS only.
-
os_waitExecuteWait for a specified duration (useful for waiting for UI to load)
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.