tool-discovery-and-safe-execution

Resolve required capabilities to available tools and execute bounded authorized probes.

Updated Sep 6, 2026
One-click install
npx skills add https://github.com/rickvang/Persona-Library --skill tool-discovery-and-safe-execution-rickvang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: tool-discovery-and-safe-execution
Source: https://github.com/rickvang/Persona-Library/tree/main/.agents/skills/tool-discovery-and-safe-execution
Command: npx skills add https://github.com/rickvang/Persona-Library --skill tool-discovery-and-safe-execution-rickvang

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? When a task needs an external tool, connector, or MCP, it is easy to assume a documented tool is actually available, run unbounded actions, or silently change shared state. This Skill enforces a disciplined workflow that verifies real runtime exposure, scopes risk, obtains authorization, and records outcomes honestly. ## Core Features & Use Cases - Capability-first resolution: Define the required capability before picking a vendor, then compare only actually exposed tools by scope, risk, permissions, and fallback. - Bounded probe execution: Plan and run read-only, sandboxed, reversible probes with explicit targets, approvals, rollback paths, and verification steps. - Learning and record boundary: Distinguish usage notes, candidate lessons, reviewed lessons, and tool-use recipes so one attempt is never promoted to shared guidance automatically. - Use Case: A user asks whether a deployment connector is available and wants a status check. The Skill verifies the runtime actually exposes the connector, runs a read-only probe against the authorized workspace, verifies the result, and records a usage note without mutating any catalog records. ## Quick Start Use the tool-discovery-and-safe-execution skill to check whether a GitHub MCP is available in this runtime and run a bounded read-only probe against my repository.

Frequently Asked Questions about tool-discovery-and-safe-execution

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a tool or MCP is available before using it?▼

Inspect the tools, connectors, and permissions actually exposed by the current runtime rather than trusting documentation. Classify each candidate as available, referenced but unavailable, no tool needed, or blocked, and never execute against a referenced-but-unavailable tool.

How to run a safe bounded probe with an external tool?▼

Define the probe's purpose, target, inputs, expected result, scope limit, approval, rollback path, and verification method first. Prefer read-only or sandboxed probes, and treat publishing, merging, messaging, or credential use as side effects requiring explicit authorization.

Can a documented tool record prove a connector is configured?▼

No. A tool record, URL, or catalog entry is not evidence of current runtime exposure, credentials, workspace, or permission. Availability must be verified against the actual requester runtime before any execution attempt.

What happens when tool execution is blocked by missing permissions?▼

Return the availability state, the exact missing requirement, a safe fallback, and the smallest next action. Do not try alternate tools or workspaces to bypass a permission or scope boundary.

When should a usage note become a reviewed lesson or recipe?▼

A single observed attempt stays a usage note. Promotion to a candidate lesson, reviewed lesson, or tool-use recipe requires the repository's review process with evidence and scope, and never happens automatically as a side effect of execution.