High-risk tools in Linux Computer Use

High severity Linux Computer Use MCP Server 6 of 8 tools

6 of the 8 tools in Linux Computer Use are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

click Execute

Click @eN, @wN, or absolute x,y. button=left|middle|right.
computer_actions Execute

Batch multiple actions ({type:click|type_text|set_text|keypress|scroll, ...}).
keypress Execute

Press keys/chords: ['Enter'], ['ctrl','a'], ['ctrl+l','Return'].
scroll Execute

Scroll at ref/coords by pixel delta.
set_text Execute

Replace value of an @eN text/entry via AT-SPI (falls back to ctrl+a + type).
type_text Execute

Type literal text at the current cursor.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Linux Computer Use

Tools at high risk

Attacks that target this class

More on Linux Computer Use

Enforce policy on every Linux Computer Use tool call.