skill_install_from_git

What skill_install_from_git does on LocalAnt

AI agents use skill_install_from_git to create or update resources in LocalAnt, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your LocalAnt environment.

Why skill_install_from_git is rated Medium

This tool creates or modifies data (cloning a repository and persisting it to disk) without irreversibly deleting anything, placing it in the Write category rather than Execute or Destructive. However, the fact that it fetches and stores arbitrary code from a git URL presents a medium severity risk—a compromised git repository or man-in-the-middle attack could introduce malicious code into the skills directory.

From the tool's definition Clones a git repository into the skills directory and creates files. The description explicitly states the skill is 'saved DISABLED', indicating the tool modifies the local filesystem by adding new skill code, though with a mitigating control (disabled by…

The rule that runs skill_install_from_git safely

PolicyLayer is an MCP gateway: it sits between your AI agents and LocalAnt, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For skill_install_from_git, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "skill_install_from_git": {
      "limits": [
        {
          "counter": "skill_install_from_git_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about skill_install_from_git