High-risk tools in Selenium

High severity Selenium MCP Server 14 of 27 tools

14 of the 27 tools in Selenium are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

alert Execute

Handle browser alert/confirm/prompt dialogs. Actions: accept, dismiss, get_text, send_text.
click Execute

Click a DOM element by CSS selector.
create_session Execute

Create a new browser session. Defaults to Chrome headless.
execute_js Execute

Execute JavaScript in the browser and return the result.
frame Execute

Switch focus to a frame or back to the main page. Actions: switch, default.
intercept_requests Execute

Register a URL pattern for network interception (log or block).
navigate_back Execute

Go back in browser history.
navigate_forward Execute

Go forward in browser history.
open_page Execute

Navigate the browser to a URL.
press_key Execute

Press a keyboard key (e.g. Enter, Tab, Escape). Optionally target a specific element.
type_text Execute

Clear an input and type text into it.
wait_for Execute

Wait until a CSS selector is visible on the page.
wait_for_dom_stable Execute

Wait until the DOM stops mutating (smart wait for AJAX content).
window Execute

Manage browser windows and tabs. Actions: list, switch, switch_latest, close.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Selenium

Tools at high risk

Attacks that target this class

More on Selenium

Enforce policy on every Selenium tool call.