feat: add GitHub API query tools and per-tool PII exemptions#38
Merged
initializ-mk merged 1 commit intomainfrom Mar 26, 2026
Merged
feat: add GitHub API query tools and per-tool PII exemptions#38initializ-mk merged 1 commit intomainfrom
initializ-mk merged 1 commit intomainfrom
Conversation
Add 6 new read-only GitHub API tools to the github skill: github_list_prs, github_get_user, github_list_stargazers, github_list_forks, github_pr_author_profiles, and github_stargazer_profiles. All list tools support pagination via page/per_page parameters. Add allow_tools config to the guardrail engine so specific tools can bypass PII checks when returning public profile data. Update error messages to identify which guardrail triggered (no_pii vs no_secrets). Pre-configure the default policy scaffold with exemptions for GitHub profile tools and write tools that echo allowed content.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
github_list_prs,github_get_user,github_list_stargazers,github_list_forks,github_pr_author_profiles(compound 2-step), andgithub_stargazer_profiles(compound 2-step). All list tools support pagination viapage/per_pageparameters.allow_toolsconfig to the guardrail engine'sno_piiguardrail, enabling specific tools to bypass PII checks when returning public profile data (emails, bios). Write tools (file_create,code_agent_write,code_agent_edit) are also exempted since they only echo content already in the LLM context."tool output blocked by content policy"to guardrail-specific messages (e.g.,"tool output blocked by no_pii guardrail (PII detected in output)").Test plan
golangci-lintpasses forforge-coreandforge-cliTestToolPhaseClassification— all 6 new tools classified asphaseExploreTestCheckToolOutput_AllowToolsBypassesPII— allowed tools pass, others blockedTestCheckToolOutput_AllowToolsOnlyAffectsConfiguredGuardrail—no_piiallowlist does not bypassno_secretsTestCheckToolOutput_ErrorMessageMentionsGuardrailType— verifies guardrail name in errorsbash -nsyntax checkgithub_pr_author_profilesagainst a real repo and verify PII passes through without guardrail block