get_label

What get_label does on GitHub

AI agents call get_label to retrieve information from GitHub without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_label is rated Low

This tool retrieves label metadata from a GitHub repository. It performs a query operation that returns information about an existing label without creating, modifying, deleting, or executing any actions. The blast radius of misuse is minimal—an attacker would only gain visibility into label names and properties, which are typically non-sensitive metadata. This clearly fits the Read category.

From the tool's definition Tool name 'get_label' and description 'Get a specific label from a repository' indicate a retrieval operation with no modification or execution of external operations.

The rule that runs get_label safely

PolicyLayer is an MCP gateway: it sits between your AI agents and GitHub, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_label, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_label": {}
  }
}

Questions about get_label