Shortcuts
Pick fewer tools, not more
Every tool you add is one more thing your worker can mess up. Most workers only need 1–3 tools.
When to add a tool
- Read — almost always.
- Edit / Write — only if it's supposed to change files.
- Bash — only if it's supposed to run commands. Never on draft tier.
- WebSearch / WebFetch — only if the answer is supposed to come from the internet.
- Grep / Glob — only if it's hunting through code.
HEADS UP · Bash is the most dangerous one
Bash means your worker can run any shell command. Agentlas auto-puts Bash behind a permissions.ask in settings.json — but if a hook fires it without asking, that's a footgun. Audit catches the obvious cases.