list_files

What list_files does on Agent Jail

AI agents call list_files to retrieve information from Agent Jail without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_files is rated Low

This tool retrieves and queries file metadata from a system. It performs no writes, deletes, executions, or financial operations. However, severity is rated 'medium' rather than 'low' because file metadata listings can reveal sensitive information (file names, sizes, timestamps, paths) that an AI agent could use for reconnaissance, information disclosure, or to identify targets for further attacks.

From the tool's definition Tool name and description: 'list_files' — 'List all uploaded files with metadata.' The verb 'list' and 'get' metadata are quintessential read operations that retrieve information without modification.

The rule that runs list_files safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Agent Jail, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_files, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_files": {}
  }
}

Questions about list_files