High-risk tools in Camofox
26 of the 47 tools in Camofox are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
camofox_evaluate_jsExecuteExecute JavaScript in the browser page context. Runs in isolated scope (invisible to page scripts — safe for anti-detection). Use for: extracting data not visible in accessibili...
-
camofox_hoverExecuteHover over an element to trigger tooltips, dropdown menus, or hover states. Use ref from snapshot or CSS selector.
-
camofox_wait_forExecuteWait for page to be fully ready (DOM loaded, network idle, framework hydration complete). Use after navigation or actions that trigger page changes.
-
camofox_wait_for_selectorExecuteWait for a CSS selector to appear in the live DOM. Use for SPA hydration and async content when snapshot refs are incomplete or stale. Once found, prefer snapshot refs for inter...
-
camofox_wait_for_textExecuteWait for specific text to appear on the page. Useful for waiting for search results, form submissions, or dynamic content loading.
-
navigateExecuteNavigate a tab to a URL. Waits for page load. Use create_tab first, then navigate. Returns final URL (may differ due to redirects).
-
navigate_and_snapshotExecuteNavigate to a URL and return the page snapshot. Combines navigate + wait + snapshot into one call.
-
batch_downloadExecuteExtract resources from a DOM container and download them all. Combines extract_resources + download in one call. Useful for downloading all images from a chat, all PDFs from a t...
-
go_backExecuteNavigate backward in browser history (Back button). Returns new page URL.
-
go_forwardExecuteNavigate forward in browser history (Forward button). Returns new page URL.
-
load_profileExecuteLoad a saved profile
-
refreshExecuteReload the current page. Useful when page state is stale or after changes.
-
toggle_displayExecuteToggle browser display mode between headless and headed. When encountering CAPTCHAs or issues requiring visual interaction, switch to headed mode (headless: false) to show the b...
-
web_searchExecuteSearch the web via 14 engines: google, youtube, amazon, bing, duckduckgo, reddit, github, stackoverflow, wikipedia, twitter, linkedin, facebook, instagram, tiktok. Call snapshot...
-
batch_clickExecuteClick multiple elements sequentially. Continues on error (clicks are independent). Returns per-click results.
-
camofox_press_keyExecutePress a keyboard key. Use after type_text to submit forms (Enter), navigate between elements (Tab), move through suggestions (ArrowDown/ArrowUp), or dismiss dialogs (Escape). Co...
-
camofox_scroll_elementExecuteScroll a specific container element (modal dialog, scrollable div, sidebar). Use when page-level scroll doesn
-
camofox_scroll_element_and_snapshotExecuteScroll a container element AND take a snapshot. Combines scroll_element + snapshot in one call. Perfect for incrementally loading lazy content in modals (e.g. Facebook group pos...
-
clickExecuteClick an element. Provide either ref (from snapshot) or CSS selector. Use snapshot first to discover element refs.
-
create_tabExecuteCreate a new browser tab with anti-detection fingerprinting. Each tab gets a unique fingerprint. Optionally provide a URL, userId, sessionKey, and viewport. To share the camofox...
-
fill_formExecuteFill multiple form fields in one call. Provide an array of field entries, each with a ref or CSS selector and the text to type. Optionally specify a submit button to click after...
-
resolve_blobsExecuteResolve blob: URLs to downloadable base64 data. Blob URLs are temporary browser objects (common in Telegram, WhatsApp, Discord) that cannot be downloaded directly. This tool con...
-
scrollExecuteScroll page up or down by pixel amount. Use to reveal content below the fold or navigate long pages.
-
scroll_and_snapshotExecuteScroll the page and take a snapshot. Useful for revealing content below the fold.
-
type_and_submitExecuteType text into a field and press a key (default: Enter). Useful for search boxes and single-field forms.
-
type_textExecuteType text into an input field. Provide either a ref (from snapshot) or a CSS selector. Use ref when available; otherwise use selector when snapshot doesn
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.