github_push_portfolio

What github_push_portfolio does on Github

AI agents use github_push_portfolio to create or update resources in Github, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Github environment.

Why github_push_portfolio is rated Medium

This tool creates new GitHub repositories from local folders. Repository creation is a Write-category action because it modifies GitHub state by adding new repositories, which can be reversed (by deleting the repo). It is not Destructive because creation is reversible. Severity is high due to the potential for creating numerous unauthorized or malicious repositories if misused by an AI agent.

From the tool's definition Tool name 'github_push_portfolio' combined with server description stating it is 'a unique portfolio push tool to create repos from local folders.' The 'push' operation and 'create repos' language indicate repository creation, which is a Write operation…

The rule that runs github_push_portfolio safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Github, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For github_push_portfolio, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "github_push_portfolio": {
      "limits": [
        {
          "counter": "github_push_portfolio_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about github_push_portfolio