install_agent_skills · Booster MCP: Risk & Policy

WHAT IT DOES

What install_agent_skills does on Booster MCP

AI agents use install_agent_skills to create or update resources in Booster MCP — usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Booster MCP environment.

WHY IT NEEDS A POLICY

Why install_agent_skills needs a policy

This tool synchronizes/installs agent skills into a local directory, which constitutes creating or modifying files. This is a Write operation rather than Execute because it appears to perform data synchronization rather than running arbitrary code. Severity is medium because modifying ~/.agents/skills could alter agent behavior but is limited to a single directory and is likely reversible.

From the tool's definition Tool description states 'Синхронизирует встроенные agent skills в ~/.agents/skills' (Synchronizes built-in agent skills in ~/.agents/skills), indicating file creation or modification in a user directory.

Attacks that exploit this kind of access

Recommended rule Ready

Verdict

install_agent_skills Rate-limited

install_agent_skills stays usable, but capped — an agent stuck in a loop can't make hundreds of changes a minute. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "install_agent_skills": {
      "limits": [
        {
          "counter": "install_agent_skills_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

LIMIT THIS TOOL →

Instant setup, no code required.

PolicyLayer is an MCP gateway: every tool call is checked against your rule before it reaches Booster MCP, so you can run agents against it safely.

FAQ

Questions about install_agent_skills

What does the install_agent_skills tool do? +

Синхронизирует встроенные agent skills в ~/.agents/skills. It is categorised as a Write tool in the Booster MCP MCP Server, which means it can create or modify data. Consider rate limits to prevent runaway writes.

How do I enforce a policy on install_agent_skills? +

Register the Booster MCP server in PolicyLayer and add a rule for install_agent_skills: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Booster MCP. Nothing to install.

What risk level is install_agent_skills? +

install_agent_skills is a Write tool with medium risk. Write tools should be rate-limited to prevent accidental bulk modifications.

Can I rate-limit install_agent_skills? +

Yes. Add a rate_limit block to the install_agent_skills rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block install_agent_skills completely? +

Set action: deny in the PolicyLayer policy for install_agent_skills. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides install_agent_skills? +

install_agent_skills is provided by the Booster MCP server (neuroghostdev/booster_mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.