bundle-check

What bundle-check does on Git

AI agents call bundle-check to retrieve information from Git without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why bundle-check is rated Low

The tool performs verification against a Gemfile, which is a check/query operation that examines state without modifying data. This is consistent with Read category tools like 'status' and 'show' mentioned in the server description. No side effects, modifications, or external operations are triggered.

From the tool's definition Tool name 'bundle-check' and description 'Verifies that the Gemfile' indicate an inspection/verification operation. The action is to check or verify a Gemfile (Ruby dependency manifest), which is a read-only query operation with no modifications.

The rule that runs bundle-check safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Git, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For bundle-check, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "bundle-check": {}
  }
}

Questions about bundle-check