← LeaderboardThe Skill Leaderboard

agent-bom-enforce

Enforce security policies on MCP tool calls and block dangerous operations at runtime. Use when: "block risky calls", "apply policy", "proxy", "runtime protection", "policy enforcement", "intercept MCP calls".

Published by LeoYeAI ↗LeoYeAI/agent-master-skills

Try your first task

A source-grounded starter task has not been verified for this skill yet.

SKILL.md

name: agent-bom-enforcedescription: >-  Enforce security policies on MCP tool calls and block dangerous operations at  runtime. Use when: "block risky calls", "apply policy", "proxy",  "runtime protection", "policy enforcement", "intercept MCP calls".version: 0.75.10license: Apache-2.0compatibility: >-  Requires Python 3.11+. Install via pipx or pip. No credentials required.  Policy files are user-provided YAML/JSON. Proxy runs locally.metadata:   author: msaad00  homepage: https://github.com/msaad00/agent-bom  source: https://github.com/msaad00/agent-bom  pypi: https://pypi.org/project/agent-bom/  scorecard: https://securityscorecards.dev/viewer/?uri=github.com/msaad00/agent-bom  tests: 6533  install:     pipx: agent-bom    pip: agent-bom    docker: ghcr.io/msaad00/agent-bom:0.75.10  openclaw:     requires:       bins: []      env: []      credentials: none    credential_policy: "Zero credentials required. Policy evaluation is local. Proxy operates on local network only. Policy files are user-provided and never transmitted."    optional_env: []    optional_bins: []    emoji: "\U0001F6AB"    homepage: https://github.com/msaad00/agent-bom    source: https://github.com/msaad00/agent-bom    license: Apache-2.0    os:       - darwin      - linux      - windows    data_flow: "Purely local. Policy evaluation runs on scan results in memory. Proxy intercepts MCP calls on local network only. Audit logs are written locally (JSONL). No data leaves the machine."    file_reads:       - "user-provided policy files (YAML/JSON policy-as-code)"      - "user-provided audit log files (JSONL from agent-bom proxy)"    file_writes:       - "proxy-audit.jsonl (local audit log, only when proxy is running)"    network_endpoints: []    telemetry: false    persistence: false    privilege_escalation: false    always: false    autonomous_invocation: restricted    disable-model-invocation: true

agent-bom-enforce — Runtime Policy Enforcement

Enforces security policies on MCP tool calls and blocks dangerous operations at runtime. Runs a local proxy that intercepts MCP calls and evaluates them against policy-as-code rules.

Install

pipx install agent-bom
agent-bom proxy              # start enforcement proxy
agent-bom policy apply policy.yaml  # apply a policy file
agent-bom policy check       # check current policy status

When to Use

  • "block risky calls" / "block dangerous MCP calls"
  • "apply policy" / "enforce policy"
  • "proxy" / "MCP proxy"
  • "runtime protection"
  • "policy enforcement"
  • "intercept MCP calls"

Commands

# Start the enforcement proxy
agent-bom proxy

# Apply a policy file
agent-bom policy apply policy.yaml

# Check current policy status
agent-bom policy check

Example Policy File

# policy.yaml
rules:
  - id: block-shell-exec
    description: Block shell execution tool calls
    match:
      tool: "bash|shell|exec|run_command"
    action: block
    severity: critical

  - id: require-path-allowlist
    description: Restrict filesystem access to allowed paths
    match:
      tool: "read_file|write_file|list_directory"
      args.path:
        not_starts_with: ["/home/", "/tmp/"]
    action: block
    severity: high

Guardrails

  • IMPORTANT: Do not start the proxy or apply policies without explicit user confirmation — enforcement changes how MCP calls are processed.
  • Confirm the policy file contents with the user before applying.
  • Do not enable proxy mode autonomously — always ask the user first.
  • Audit logs are written locally only; no data is transmitted externally.
  • This skill has disable-model-invocation: true — do not auto-run enforcement actions.