High-risk tools in Sbox

High severity Sbox MCP Server 34 of 207 tools

34 of the 207 tools in Sbox are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

bake_navmesh Execute

Enable + bake the active scene
bake_reflections Execute

Bake all EnvmapProbe reflection probes in the scene (EnvmapProbe.BakeAll) so they actually capture their surroundings — placing a probe with add_envmap_probe does nothing visibl...
build_terrain_mesh Execute

Build a standalone heightmap terrain mesh from a hills/clearings JSON spec — independent of MapBuilder. Use when you don
console_run Execute

Run an s&box console command / ConCmd via Sandbox.ConsoleSystem.Run — e.g. a cvar (
create_event_director Execute

Generate a generalized L4D-style AI/pacing director component (host-authoritative). On a configurable interval the host rolls a weighted pick over a [Property] List<GameObject> ...
create_npc_spawner Execute

Generate a spawner Component that instantiates an NPC prefab over time / in escalating waves at spawn points, capped by maxAlive. RUN
create_trigger_zone Execute

Generate a trigger zone script that detects when GameObjects enter/exit a collider volume. Supports teleport, damage, spawn, and log actions
debug_draw_box Execute

Draw a wireframe debug box centered at a point. Renders in editor and play. Ideal for visualizing a trigger_zone
debug_draw_ray Execute

Draw a debug ray (drawn as an arrow) from an origin along a direction for a given length. Renders in editor and play. Ideal for visualizing a raycast result or a facing/normal d...
debug_draw_sphere Execute

Draw a wireframe debug sphere at a point. Renders in editor and play. Ideal for visualizing a physics_overlap radius or an NPC
drive_player Execute

EXPERIMENTAL — Drive the active PlayerController DURING PLAY MODE across multiple frames: synthesize sustained look (EyeAngles), analog movement (wish velocity), and/or hold a n...
execute_csharp Execute

EXPERIMENTAL. Compile + run a C# snippet inside the s&box EDITOR (which is unsandboxed): writes a temp [ConCmd] into the project
focus_object Execute

Move the editor camera to focus on a specific GameObject (like double-clicking in the hierarchy)
frame_camera Execute

Aim the s&box EDITOR viewport camera at a GameObject (by id) or a world point (position + optional radius), then call take_screenshot to capture that view. This is how Claude po...
invoke_button Execute

Call a public method on a component. Matching is tried in order: (1) a [Button] attribute label, (2) the exact method NAME, (3) case-insensitive name with spaces stripped. Calls...
invoke_method Execute

Call a public method BY NAME on a component of a live scene GameObject, passing ARGUMENTS. The with-args sibling of invoke_button (which only calls parameterless [Button]/method...
load_scene Execute

Open a scene in the s&box editor by its path
network_spawn Execute

Network-enable a GameObject so it is synchronized across all connected clients. Calls NetworkSpawn()
play_animation Execute

Play a named animation sequence on a GameObject
play_sound_preview Execute

Play a sound in the editor for testing without entering play mode
playtest Execute

playtest
recompile_asset Execute

Compile a project asset by path — registers it with the editor
restart_editor Execute

Restart the s&box editor and wait for the bridge to reconnect — closes the C#-edit→recompile loop so addon/bridge changes apply without a manual restart. Relaunches straight bac...
run_self_test Execute

Run an end-to-end health check of the bridge: create a temp object, add a component, assign + measure a model, capture a screenshot, recompile a temp asset, remove the component...
sculpt_terrain Execute

Apply a heightmap brush at (x, y) to MapBuilder. Modes: raise, lower, flatten, smooth. Modifies the current heightmap directly and rebuilds the mesh; survives between calls unti...
select_object Execute

Select a GameObject in the editor (highlights it in the hierarchy and scene view)
set_runtime_property Execute

Set a component property value during play mode — tweak values live while the game runs
set_time_scale Execute

Set the running game
simulate_input Execute

Synthesize player input during PLAY mode so behavior can be verified without a human at the keyboard: press/hold/release a named input action (e.g.
spawn_particle Execute

Spawn an additive particle effect (no texture asset needed): kind = fire (rising flame), embers (slow drifting glow), or sparks (a one-shot burst). Renders as tinted glowing dot...
spawn_vpcf Execute

Spawn a REAL particle system by playing a compiled .vpcf asset through LegacyParticleSystem — the reliable path that actually renders, unlike spawn_particle/create_particle_effe...
start_play Execute

Enter play mode — starts running the game in the editor. Scripts execute, physics simulate, everything goes live
stop_play Execute

Exit play mode — stops the game and returns to editor. All runtime changes are discarded
trigger_hotload Execute

Force s&box to recompile and hotload all C# scripts immediately. Use after creating or editing scripts to see changes in real-time

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in Sbox

Tools at high risk

Attacks that target this class

More on Sbox

Enforce policy on every Sbox tool call.