skill_info

What skill_info does on LocalAnt

AI agents call skill_info to retrieve information from LocalAnt without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why skill_info is rated Low

This tool retrieves and returns information about skills in the LocalAnt system. The verb 'Get' and the action of fetching manifest and validation details are characteristic of read-only operations with no side effects. It does not execute code, modify data, delete data, or move money. The blast radius of misuse is minimal—an attacker could learn details about available skills but cannot perform actions with them.

From the tool's definition Tool description states 'Get full details for a skill' - this is a query/retrieval operation that retrieves information about a skill's manifest and validation without modifying, executing, or deleting anything.

The rule that runs skill_info safely

PolicyLayer is an MCP gateway: it sits between your AI agents and LocalAnt, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For skill_info, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "skill_info": {}
  }
}

Questions about skill_info