keycard-query-policy
Answer questions about the active Cedar policy and diagnose tool blocks — read-only; does not modify the policy.
Answer questions about the active Cedar policy and diagnose tool blocks — read-only; does not modify the policy.
When to Use
Section titled “When to Use”Use this skill when:
- You want to know what tools are allowed by the current policy
- You want to know whether a specific tool is permitted (“Can I use X?”, “Am I allowed to use X?”, “What’s my policy?”)
- You want to understand why a tool was blocked
- A tool was just blocked and you want to diagnose it
Do not use this skill to change, add, or remove policy rules — use keycard-upsert-policy for that. Do not use it for general questions about Cedar concepts that don’t reference your active policy.
Arguments
Section titled “Arguments”[policy question or blocked tool, e.g. 'May I use the Bash tool?' or 'Why was Read blocked?']
Examples
Section titled “Examples”- “Why was the Bash tool blocked?”
- “What tools does my policy allow?”
- “Am I allowed to use WebFetch?”
- “What’s my current policy?”