High-risk tools in OODA Computer Control

High severity OODA Computer Control MCP Server 32 of 99 tools

32 of the 99 tools in OODA Computer Control are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

batch_exec_cli Execute

Execute multiple shell commands in parallel.
batch_keyboard_actions Execute

Execute sequence of keyboard actions (type, press, shortcut, wait).
batch_mouse_actions Execute

Execute sequence of mouse actions (move, click, drag, scroll, wait).
evaluate_js Execute

Execute JavaScript code in the page context.
exec_cli Execute

Execute shell commands on the host system (YOLO mode)
execute_code Execute

Execute code in memory without saving to file. Supports python, node, r, powershell, bash.
keyboard_shortcut Execute

Execute keyboard shortcut (e.g.,
launch_application Execute

Launch an application by path or name.
launch_browser Execute

Launch a browser instance (Puppeteer or Playwright). Toggles headless mode.
navigate_page Execute

Navigate to a URL and wait for load.
start_process Execute

Start a new interactive process session. Returns a sessionId for subsequent interactions. Use for long-running processes, REPLs, SSH, or any process requiring stdin/stdout inter...
stop_search Execute

Stop a search session and cleanup resources.
wait Execute

Wait/sleep for specified milliseconds. Use in action sequences.
wait_for_window Execute

Wait for a window to appear. Matches process name or window title.
focus_window Execute

Bring a window to the foreground by title or PID.
maximize_window Execute

Maximize the active or specified window.
minimize_window Execute

Minimize a window or all windows.
notify Execute

Show a system notification.
click_element Execute

Click an element identified by CSS/XPath selector.
close_browser Execute

Close the browser instance and cleanup.
interact_with_process Execute

Send input to a running process session. Input is written to the process stdin.
keyboard_press Execute

Press a key with optional modifiers (ctrl, alt, shift).
keyboard_type Execute

Type text as keyboard input.
mouse_click Execute

Click mouse button at position. Supports double-click.
mouse_drag Execute

Drag from one position to another.
mouse_move Execute

Move mouse cursor to coordinates.
mouse_scroll Execute

Scroll mouse wheel.
move_window Execute

Move the active or specified window.
resize_window Execute

Resize the active or specified window.
restore_window Execute

Restore a minimized/maximized window.
set_environment Execute

Set an environment variable.
type_text Execute

Type text into an input field.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in OODA Computer Control

Tools at high risk

Attacks that target this class

More on OODA Computer Control

Enforce policy on every OODA Computer Control tool call.