High-risk tools in Portals
9 of the 51 tools in Portals are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
change_task_stateExecuteChange the state of a task/quest or activate an effector in the live game via the IFrameBridge. Two modes: (1) Provide effectorId to directly activate an effector (optionally wi...
-
connect_to_gameExecuteConnect to the live game client in the browser via WebSocket bridge. Sends an mcp_connect event and waits for the browser to confirm with the room ID. The confirmed room ID from...
-
generate_ai_imageExecuteGenerate an AI image from a text prompt using Google Imagen 4 Fast (via Replicate). Kicks off an async job — poll list_generated_images until the new item has a populated `image...
-
generate_ai_textureExecuteGenerate a seamless PBR texture from a text prompt using Google Imagen 4 Fast (via Replicate). Kicks off an async job — poll list_generated_textures until the new item has a pop...
-
image_to_3d_modelExecuteGenerate a 3D model from an image using Tripo AI. Provide a URL to an image (jpg, png, webp, etc.). Returns a task ID. Use check_3d_model_task to poll for progress.
-
record_videoExecuteRecord a video of the live 3D scene from a CameraObject. Pass roomItemId to record from an existing CameraObject, or use placeCameraItem with keyframes to create a new CameraObj...
-
simulate_key_inputExecuteAudit Portals OnKeyPressedEvent/OnKeyReleasedEvent trigger mappings and optionally simulate key press/release frames. Uses the same key-code names and matching semantics as Unit...
-
simulate_trigger_zone_inputExecuteAudit Portals Trigger-zone pressBtn/keyCode behavior and optionally simulate enter/exit/key frames. Use this for the Trigger cube setting labeled Press Key To Activate: pressBtn...
-
text_to_3d_modelExecuteGenerate a 3D model from a text prompt using Tripo AI. Returns a task ID. Use check_3d_model_task to poll for progress.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.