Navil Policy

Reduce MCP token costs by up to 94% and enforce least-privilege tool access. Creates YAML policies that control which MCP tools each agent can see and call....

This skill is internally consistent with its purpose — it tells you to install and run a policy proxy that filters MCP tool lists. Before installing: (1) review the navil GitHub repo and confirm package names/versions match what the SKILL.md references; (2) test navil and navil-shield in a non-production environment because the proxy will be on-path and can observe tool lists and usage; (3) inspect any auto-generated policy.yaml before accepting rules and keep manual rules in a backed-up file; (4) prefer installing in a sandbox/container or virtualenv rather than globally (the SKILL.md suggests pip which can modify system packages); and (5) verify community templates and the package checksum/signature if you need strong assurance. If you are uncomfortable with an on-path proxy inspecting agent traffic, do not deploy this in production without an architecture review.

Type: OpenClaw Skill Name: navil-policy Version: 1.0.2 The navil-policy skill is a legitimate tool designed to optimize Model Context Protocol (MCP) token usage by filtering tool schemas. It installs the 'navil' Python package and provides instructions for the agent to manage YAML-based access policies in ~/.navil/. The code and instructions in SKILL.md and skill.json are consistent with the stated purpose of cost reduction and least-privilege security, with no evidence of data exfiltration, obfuscation, or malicious intent.