Skip to content

docs: describe the permissions the guardrails skill needs #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
fwereade wants to merge 1 commit into
base: main
Choose a base branch
from
+16 −4
Open

docs: describe the permissions the guardrails skill needs #6

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 16 additions & 4 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,8 +12,20 @@ away from defining infrastructure that violates deployed policies.

Requires the Stacklet MCP server and Python 3.11+ (the scripts use only the standard library).

The skill runs its bundled scripts with `python3`, so Claude Code asks you to approve the first
call. (Don't expect the skill to pre-approve this itself: a skill that declares `allowed-tools`
needs an approval just to load, and is silently skipped in headless `claude -p` runs.)
## Permissions

To stop the prompts, add a permission rule for the skill's scripts in your own settings.
- **Stacklet**: the skill only runs GraphQL queries, through the MCP server's
`platform_graphql_query`, and writes nothing to the platform.
- **Claude Code tools**: approve `mcp__<server>__platform_graphql_query`, `python3` running the
skill's bundled scripts, and creating and writing files in a temp directory (the sync saves
query results there before ingesting them). The skill doesn't pre-approve anything itself. A
skill that declares `allowed-tools` needs an approval just to load, and headless `claude -p` runs
skip it silently. To stop the prompts, add permission rules to your own settings. The sync runs
as a background sub-agent, which can't answer a prompt: if it is denied a tool, the main session
runs the sync itself and asks you there.
- **Files**: the cache is under `~/.stacklet/guardrail-cache/` (set `STACKLET_GUARDRAILS_CACHE` to
move it). Each repo's scope is recorded in `.stacklet/guardrails/scope.json` at the repo root,
which is meant to be committed.
- **Model calls**: distilling guardrails and assessing the posture run `claude -p` under your own
Claude login, so they spend your tokens. To use another tool instead, see
`plugins/stacklet/skills/guardrails/references/inference.md`.
Loading