High-risk tools in Melo
13 of the 93 tools in Melo are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
batch_operationsExecuteExecute multiple tool operations in a single batch. Operations run sequentially. Args: - operations (array): Array of { tool, params } objects (min 1, max 50) Returns: Array...
-
character_navigationExecuteMove a character to a position using pathfinding. Bypasses the input system. Args: - target (string | number[]): Instance path or [x, y, z] coordinates - timeout (number, o...
-
execute_luauExecuteRun arbitrary Luau code directly in Studio
-
redoExecuteTrigger redo in Studio to redo the last N operations. Args: - count (number, optional): Number of redo steps (default: 1, max: 50) Returns: Confirmation of redo.
-
rollbackExecuteTrigger undo in Studio to rollback the last N operations. Args: - count (number, optional): Number of undo steps (default: 1, max: 50) Returns: Confirmation of rollback.
-
run_codeExecuteExecute Luau code in Studio and return printed output. Alias for execute_luau. Args: - code (string): Luau code to execute Returns: Captured print output.
-
run_playtest_scenarioExecuteOrchestrate a sequence of playtest steps and return a structured verdict. Steps run in order; the run aborts on the first failing assertion or unhandled error. Always calls stop...
-
run_script_in_play_modeExecuteStart a playtest, run a script, then automatically stop. Returns all output. Useful for testing code changes without manual intervention. Args: - code (string): Luau code to ...
-
set_modeExecuteSwitch the operating mode of Linkedsword. -
-
start_playtestExecuteStart a play session in Studio. Begins capturing all print/warn/error output. Use get_playtest_output to poll logs during the session, and stop_playtest to end it. Args: - mo...
-
stop_playtestExecuteEnd the current play session and return all captured output logs. Returns: { output: string, errors: string[], duration: number }
-
user_keyboard_inputExecuteSimulate keyboard presses during a playtest. Args: - key (string): Key to press (e.g.
-
user_mouse_inputExecuteSimulate mouse clicks and movements during a playtest. Requires an active play session. Args: - action (string):
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.