Skip to content
Get packs

Inspect Workspace Tool Policies

Lets the agent read and explain its per-workspace guard rules that block risky tool calls, and suggest edits the user makes.

Source Download skill
Repository
google/adk-recipes
Stars
10,568
Licence
Apache-2.0
Files
1 file

What it does

This skill teaches an AI agent how its safety guard works. The agent can read the workspace's policy file (.lha/policies.jsonl), explain which destructive or sensitive commands and paths are blocked, and give the user the exact line to add or remove if they want a rule changed. The agent is told not to edit that file itself; the user makes the change. It is a guide to the guardrail system rather than a new capability like document editing.

Great for

  • Developers running the long-horizon harness who want to know which commands are blocked and why
  • Teams customizing per-project guard rules for an agent workspace
  • Users who hit a blocked tool call and want to understand the policy behind it

Skip it if

  • General users of Claude who do not run this agent harness; the policy file and callbacks will not exist there
  • Anyone expecting the agent to change safety rules on its own; the skill explicitly forbids that, so it cannot loosen its own guardrails
  • Security audits that need the full default seed contents; the seed is not readable through the agent's tools, so the skill only summarizes it

Try asking

  • “What policies are currently in force for this workspace?”
  • “Block the command rm -rf node_modules in this project and tell me the line to add”
  • “Which rule is blocking my last bash call, and how do I remove it?”
  • “Why was my git push --force call stopped, and how do I approve it once?”
Step-by-step guide: how to use Inspect Workspace Tool PoliciesInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    policy.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip policy.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip policy.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Ask the agent to list active rules before adding one, so new lines do not duplicate existing ones.
  • Use the permission layer (.lha/permissions.jsonl) if you want a prompt instead of a hard block.
  • Remember that /grant and /yolo are user-typed commands; the agent cannot invoke them.

What's inside

  • SKILL.md

Redistributed unmodified from google/adk-recipes under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.