replace_picture

What replace_picture does on Hwpx

AI agents use replace_picture to create or update resources in Hwpx, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Hwpx environment.

Why replace_picture is rated Medium

This tool modifies existing document content by swapping out an image asset, which is a Write operation (reversible modification). It does not execute code, delete content irreversibly, or move financial resources. The severity is medium because misuse could substitute images with inappropriate or malicious content, affecting document integrity, but the change is reversible.

From the tool's definition Tool replaces (교체합니다) the image asset linked to a picture object while maintaining its geometry. The description explicitly indicates modification of document content (the image asset), which is reversible—the original image can be restored by replacing it…

The rule that runs replace_picture safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Hwpx, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For replace_picture, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "replace_picture": {
      "limits": [
        {
          "counter": "replace_picture_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about replace_picture