agent-tool-safety-guard

What problem does it solve?

This Skill helps you prevent an AI agent from having too much power, too much access, or the wrong identity when it calls tools, functions, or APIs. It is designed to stop confused-deputy failures, unsafe destructive actions, and tool-chain abuse before they become incidents.

Core Features & Use Cases

• Least-Privilege Tool Review: Builds a per-tool matrix covering side effects, reversibility, blast radius, cost, and execution identity.
• Calling-User Authority Binding: Ensures each tool runs with the calling user's permissions and tenant scope, not a shared privileged service account.
• Safety Controls for High-Risk Actions: Requires schema validation, approval gates for destructive or expensive actions, and limits on tool-chain composition abuse.
• Use Case: Review a support agent that can look up customers, issue refunds, and delete accounts, then narrow unsafe tools, add approvals, and define safe execution boundaries.

Quick Start

Ask for a tool-safety review of the agent's available tools, including privilege boundaries, approval requirements, and misuse paths.