policy-engine-builder

Name: policy-engine-builder
Availability: InStock
Author: DTMC-marketplace

Create TOML rules for the Gemini CLI Policy Engine.

2|Updated Jan 15, 2026

Search Tags:#security policy #tool control #gemini cli #access management #policy engine #toml rules

Ready to run

npx skills add https://github.com/DTMC-marketplace/governance --skill policy-engine-builder

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: policy-engine-builder
Source: https://github.com/DTMC-marketplace/governance/tree/main/skills/policy-engine-builder
Command: npx skills add https://github.com/DTMC-marketplace/governance --skill policy-engine-builder

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps users understand and create TOML rules for the Gemini CLI Policy Engine, enabling fine-grained control over tool execution and security.

Core Features & Use Cases

Rule Syntax Guidance: Explains the structure and fields for defining policies.
Decision Types: Details how to implement allow, deny, and ask_user decisions.
Priority System: Clarifies how rule tiers and priorities determine execution order.
Tool & Argument Matching: Shows how to match specific tools, commands, and arguments.
MCP Server Rules: Guides on controlling access to specific MCP servers.
Use Case: A security administrator needs to create a policy that prevents any shell command starting with rm -rf from being executed by Gemini.

Quick Start

Use the policy-engine-builder skill to create a TOML rule that denies the execution of any shell command starting with 'rm -rf'.

Frequently Asked Questions about policy-engine-builder

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I create TOML rules for the Gemini CLI Policy Engine?▼

To create TOML rules for the Gemini CLI Policy Engine, define fields for specific tools, commands, and arguments, then establish execution permissions using decision types like allow, deny, or ask_user.

How does the priority system work in Gemini CLI security policies?▼

The priority system in Gemini CLI security policies uses rule tiers to determine execution order, ensuring higher-priority TOML rules are evaluated first to manage tool access and approval workflows effectively.

Can I control access to specific MCP servers using TOML rules?▼

Yes, you can control access to specific MCP servers using TOML rules by defining targeted server rules within the Gemini CLI Policy Engine to manage AI agent interactions and permissions.

How do I block shell commands starting with 'rm -rf' in Gemini CLI?▼

To block shell commands starting with 'rm -rf' in Gemini CLI, construct a TOML rule that matches the specific tool and arguments, then assign a deny decision type to prevent execution.

What decision types are available for tool execution permissions in the Gemini CLI?▼

The Gemini CLI Policy Engine supports three decision types for tool execution permissions: allow, deny, and ask_user, which facilitate the creation of security policies and approval workflows.

What is the best way to manage AI agent tool permissions with TOML?▼

The best way to manage AI agent tool permissions with TOML is using the Gemini CLI Policy Engine to match specific tools and arguments, applying priority tiers and decision types for fine-grained access control.