network-ls

What network-ls does on Github

AI agents call network-ls to retrieve information from Github without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why network-ls is rated Low

This tool performs a query operation (list/ls) on Docker networks, returning information about existing networks. It has no side effects, does not create, modify, or delete resources, and does not execute arbitrary code. The blast radius of misuse is minimal—an agent could only view network topology information, which is non-sensitive discovery data in most contexts.

From the tool's definition Tool name 'network-ls' and description 'Lists Docker networks with structured driver and scope information' indicate a read-only operation that retrieves and displays existing network configurations without modifying or deleting them.

The rule that runs network-ls safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Github, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For network-ls, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "network-ls": {}
  }
}

Questions about network-ls