git_show

What git_show does on GitHub

AI agents call git_show to retrieve information from GitHub without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why git_show is rated Low

The 'git_show' command is a read-only git operation that retrieves and displays information about git objects (commits, tags, blobs, trees) without any side effects. It does not modify repositories, execute arbitrary code, trigger workflows, or delete data. Therefore, it falls squarely into the Read category with low severity.

From the tool's definition Tool name 'git_show' aligns with the standard git command that displays commit content, file contents, or object information. The description 'Git show' indicates a query/retrieval operation with no modification or execution of external commands.

The rule that runs git_show safely

PolicyLayer is an MCP gateway: it sits between your AI agents and GitHub, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For git_show, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "git_show": {}
  }
}

Questions about git_show