gem-list

What gem-list does on Build

AI agents call gem-list to retrieve information from Build without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why gem-list is rated Low

This tool queries and retrieves installed Ruby gem metadata. It performs a simple information lookup operation without creating, modifying, executing, or deleting any data. The output is structured JSON containing gem names and versions. This is a straightforward read operation with minimal security risk—the worst case is disclosure of which gems are installed on a system.

From the tool's definition Tool name: gem-list. Description: 'Lists installed Ruby gems with version information. Returns structured JSON with gem names and versions.' The verb 'Lists' and action of retrieving version information indicate read-only data retrieval with no side effects.

The rule that runs gem-list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Build, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For gem-list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "gem-list": {}
  }
}

Questions about gem-list