High-risk tools in Hermes Computer Use

High severity Hermes Computer Use MCP Server 26 of 38 tools

26 of the 38 tools in Hermes Computer Use are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

back Execute

Browser back (alt+Left).
clear_field Execute

Select all text in the focused widget and delete it. Handy before
dom_click Execute

Click the element matching the CSS selector. Faster and more
dom_eval Execute

Evaluate arbitrary JavaScript in the page context and return the
dom_type Execute

Set the value of an input / textarea / contenteditable matching the
dom_wait Execute

Poll until the selector matches at least one visible element, or
double_click Execute

Move to (x,y) then double left-click.
drag Execute

Press-and-hold left button at (x1,y1), drag to (x2,y2), release.
forward Execute

Browser forward (alt+Right).
hold_key Execute

Hold a key down for ms milliseconds, then release. Same key naming
left_click Execute

Move to (x,y) then single left-click.
middle_click Execute

Move to (x,y) then single middle-click (typically opens link in new tab).
move Execute

Move the cursor to (x,y). Set human=False for an instant jump.
new_tab Execute

Open a new Chrome tab to url.
open_url Execute

Focus Chrome's address bar and load a URL.
paste Execute

Paste the clipboard into the focused widget (ctrl+v).
press_key Execute

press_key
redo Execute

Redo the last undone edit (ctrl+shift+z).
reload Execute

Reload page. hard=True for ctrl+shift+R.
right_click Execute

Move to (x,y) then single right-click.
run_shell Execute

Run a shell command inside WSL (for ops like `ls`, `curl`, file ops).
scroll Execute

Scroll wheel at cursor (or at given x/y if provided). amount = click count.
select_all Execute

Select all content in the focused widget (ctrl+a).
type_text Execute

Type unicode text into whatever widget currently has focus.
undo Execute

Undo the last edit in the focused widget (ctrl+z).
wait Execute

Sleep for ms milliseconds (useful to wait for page loads/animations).

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Hermes Computer Use

Tools at high risk

Attacks that target this class

More on Hermes Computer Use

Enforce policy on every Hermes Computer Use tool call.