restricted-tool-triage

What the skill teaches

A skill from GitHub's Agentic Workflows project (gh-aw) for an agent running inside a workflow whose tool list has been narrowed, for example to a short set of allowed bash commands. It tells the agent to read the declared allowlist before acting, to change approach after the first denied call instead of retrying near-identical commands, and to keep count of the small fixed number of denials gh-aw tolerates before it ends the session. It also covers reporting a missing tool accurately without blaming credentials, and finishing the parts of the task that allowed tools can still do.

Capabilities

Details