📦
skill-i18n
38ترجمة توثيق المهارات عالميًا
غالبًا ما تحتاج توثيقات المهارات إلى نسخ محلية للمستخدمين الدوليين. تساعد هذه المهارة Claude وCodex وClaude Code على ترجمة SKILL.md وREADME.md مع الحفاظ على النص التقني.
التوثيق عرض
المهارات skill-permissions
📦
skill-permissions
مراجعة المحتوى r1 مخاطر عالية ⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات
تدقيق أذونات المهارات
قد تحتاج مهارات Claude Code إلى أذونات shell يصعب مراجعتها يدويا. تحلل هذه المهارة استخدام الأوامر المصرح به وتساعد على إنشاء إدخالات allowlist مطابقة مع تحذيرات للتغييرات واسعة النطاق.
يدعم: Claude Codex Code(CC)
توقف واطلب التأكيد قبل التثبيت.
راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.
التثبيت باستخدام Agent لدي
انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.
طلب الوكيل
Review the Skillstore skill "skill-permissions" from https://skillstore.io/skills/guo-yu-skill-permissions.md and its manifest at https://skillstore.io/api/skills/guo-yu-skill-permissions/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.
موارد مهيّأة لـ Agents
استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.
اختبرها
جارٍ استخدام "skill-permissions". حلل مهارة port-allocator.
النتيجة المتوقعة:
- يسرد الأوامر المكتشفة مثل find و ls و cat و lsof.
- يعرض قواعد allow المقترحة لـ Claude Code.
- يوصي بأمر allow محدد لتلك المهارة.
جارٍ استخدام "skill-permissions". اعرض الأذونات لكل المهارات.
النتيجة المتوقعة:
- يعرض جدولا بالمهارات المثبتة ومجموعات الأذونات الرئيسية.
- يضع علامة على المهارات التي تحتاج إلى تفويض.
- يقترح مراجعة النتائج قبل التفويض على دفعات.
جارٍ استخدام "skill-permissions". فوّض مهارة واحدة تمت مراجعتها.
النتيجة المتوقعة:
- يفيد بأن قواعد الأذونات قد تم دمجها.
- يعرض ملف الإعدادات المتأثر.
- يذكّر المستخدم بأن الأذونات تُطبق في جلسة جديدة أو بعد المسح.
التدقيق الأمني
مخاطر عاليةv6 • ٩/٧/٢٠٢٦ فتح التقرير المرتبط بالإصدار
The skill is a security-sensitive permission management helper, not malware. Most dangerous command hits are documented blocklist examples, but the skill can broaden Claude Code Bash allow rules and batch-modify settings or skill files, so publication should require strong warnings and safer defaults.
3
الملفات التي تم فحصها
894
الأسطر التي تم تحليلها
115
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة
مخاوف أمنية مؤكدة (4)
مرتفع
Batch Permission Expansion and Skill File Modification
The skill documents allow-all and inject modes that can modify settings.json or add allow commands across installed skills. This creates broad local permission expansion risk even though the documentation warns users.
The behavior is explicitly described in multiple language files and affects configuration plus many skill files. The warnings reduce surprise but do not remove the risk.
مرتفع
Overbroad Claude Directory Allow Rules
The generated allow rules include broad access to ~/.claude paths, including Bash(cat ~/.claude/*). These rules can expose sensitive local Claude configuration if granted too broadly.
The allow rules are shown directly in the documented authorization flow. The risk depends on user approval, but the scope is broad and security-sensitive.
متوسط
System reconnaissance
- Avoid `inject` or `allow-all` unless you understand the impact
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
System reconnaissance
1. **Conservative analysis** - Only identify explicitly appearing commands, avoid over-authorization
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
عناصر مراجعة القدرات (115)
هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.
مرتفع
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
場所: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
設定ファイル: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- **権限設定**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- **スキルディレクトリ**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
1. `~/.claude/settings.json` を読み取り
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
Location: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
Config file: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
cat ~/.claude/settings.json 2>/dev/null || echo '{"permissions":{"allow":[]}}'
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
📁 位置: ~/.claude/skills/dangerous-skill
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
📁 位置: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(find ~/.claude/skills *)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
مرتفع
Hidden file in home directory
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
場所: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
設定ファイル: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- **権限設定**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- **スキルディレクトリ**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
1. `~/.claude/settings.json` を読み取り
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
| `/skill-permissions inject` | High | Batch modify all skill SKILL.md files |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
| `/skill-permissions allow-all` | Medium | Batch modify settings.json |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
- Avoid `inject` or `allow-all` unless you understand the impact
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
| `/skill-permissions` | Analyze all skills and show permission summary |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
| `/skill-permissions allow-all` | Execute one-time authorization for all skills |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
| `/skill-permissions inject` | Inject allow command into all skills |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
Convert identified commands to `permissions.allow` rules:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
2. Merge the following permissions to `permissions.allow`:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Shell command substitution
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
Location: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
Config file: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
### 命令: `/skill-permissions allow-all`
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
### 命令: `/skill-permissions inject`
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
为所有 skill 注入 `allow` 子命令:
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
- `allow_override`: 从默认黑名单中移除的命令(谨慎使用)
The documentation allows users to remove patterns from the default blocklist. That is intentional configuration, but it can weaken safeguards around dangerous commands.
متوسط
Ruby/shell backtick execution
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
1. **文件修改风险** - `inject` 命令会修改所有 skill 的 SKILL.md 文件
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
2. **权限扩大风险** - `allow-all` 会为所有 skill 添加权限,可能授予过多权限
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
متوسط
Ruby/shell backtick execution
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Ruby/shell backtick execution
2. 合并以下权限到 `permissions.allow`:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
cat ~/.claude/settings.json 2>/dev/null || echo '{"permissions":{"allow":[]}}'
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
📁 位置: ~/.claude/skills/dangerous-skill
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
📁 位置: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(find ~/.claude/skills *)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
متوسط
Hidden file access
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
عوامل الخطر
⚙️ الأوامر الخارجية (50)
SKILL.ja.md:138-139 SKILL.ja.md:107 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:44-51 SKILL.md:51-54 SKILL.md:54 SKILL.md:55-60 SKILL.md:60-62 SKILL.md:62-73 SKILL.md:73-77 SKILL.md:77-82 SKILL.md:82-84 SKILL.md:84-94 SKILL.md:94-99 SKILL.md:99-101 SKILL.md:101-107 SKILL.md:107-124 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-127 SKILL.md:127-132 SKILL.md:132-133 SKILL.md:133-134 SKILL.md:134-135 SKILL.md:135-140 SKILL.md:140-141 SKILL.md:141-146 SKILL.md:146-162 SKILL.md:162-163 SKILL.md:163-166 SKILL.md:166-180 SKILL.md:180-184 SKILL.md:184-185 SKILL.md:185-190 SKILL.md:190-192 SKILL.md:192-194 SKILL.md:194-198 SKILL.md:198-199
📁 الوصول إلى نظام الملفات (50)
SKILL.ja.md:47 SKILL.ja.md:67 SKILL.ja.md:82 SKILL.ja.md:126 SKILL.ja.md:131 SKILL.ja.md:136 SKILL.ja.md:150 SKILL.ja.md:152 SKILL.ja.md:159 SKILL.ja.md:160 SKILL.ja.md:173 SKILL.ja.md:180 SKILL.ja.md:181 SKILL.ja.md:47 SKILL.ja.md:67 SKILL.ja.md:82 SKILL.ja.md:126 SKILL.ja.md:131 SKILL.ja.md:136 SKILL.ja.md:150 SKILL.ja.md:152 SKILL.ja.md:159 SKILL.ja.md:160 SKILL.ja.md:173 SKILL.ja.md:180 SKILL.ja.md:181 SKILL.ja.md:82 SKILL.md:47 SKILL.md:68 SKILL.md:83 SKILL.md:100 SKILL.md:148 SKILL.md:153 SKILL.md:159 SKILL.md:174 SKILL.md:177 SKILL.md:184 SKILL.md:185 SKILL.md:198 SKILL.md:205 SKILL.md:206 SKILL.md:47 SKILL.md:68 SKILL.md:83 SKILL.md:100 SKILL.md:148 SKILL.md:153 SKILL.md:159 SKILL.md:174 SKILL.md:177
الأنماط المكتشفة
System reconnaissance×2
دقّقه: claude عرض سجل التدقيق →
شارك واستشهد بهذا التقرير
شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.
نسخ رابط التقرير
https://skillstore.io/skills/guo-yu-skill-permissions/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportشارة Markdown
[](https://skillstore.io/skills/guo-yu-skill-permissions?utm_source=security_passport_badge)شارة HTML
<a href="https://skillstore.io/skills/guo-yu-skill-permissions?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/guo-yu-skill-permissions/security.svg" alt="Skillstore security assessment" loading="lazy"></a>بطاقة قابلة للتضمين
<iframe src="https://skillstore.io/embed/skills/guo-yu-skill-permissions.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>الاستشهادات الأكاديمية (APA · BibTeX · CFF)
اقتباس APA
guo-yu. (2026). skill-permissions security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/guo-yu-skill-permissions/audits/6اقتباس BibTeX
@techreport{guo-yu-guo-yu-skill-permissions-2026,
author = {guo-yu},
title = {skill-permissions security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/guo-yu-skill-permissions/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-permissions security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "guo-yu"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/guo-yu-skill-permissions/audits/6"
identifiers:
- type: other
value: "skillstore:guo-yu-skill-permissions:audit:6"
description: "Skillstore immutable audit report identifier"
تقييم Skillstore
سبب هذا التقييم موثوقية الأدلة: متوسط 55
الهندسة المعمارية
85
قابلية الصيانة
87
المحتوى
71
المجتمع
83
الامتثال للمواصفات
ما الذي يمكنك بناؤه
مراجعة مهارة مجتمعية جديدة
تحليل مهارة واحدة تم تنزيلها قبل منح أذونات Claude Code Bash.
تحضير مجموعة مهارات محلية
تلخيص الأذونات عبر المهارات المثبتة قبل جلسة إعداد للفريق.
توثيق احتياجات الأذونات
إنشاء إرشادات أوامر allow تشرح الأذونات التي تتطلبها المهارة.
جرّب هذه الموجّهات
تحليل مهارة واحدة
استخدم skill-permissions لتحليل الأذونات التي يتطلبها <skill-name> واشرح كل إذن مطلوب.
المراجعة قبل التفويض
شغّل تحليل أذونات المهارة للقراءة فقط على <skill-name>. لا تعدّل الإعدادات حتى أوافق على قواعد allow المقترحة.
تدقيق كل المهارات المثبتة
حلل كل مهارات Claude Code المثبتة واجمع النتائج حسب مخاطر الأذونات المنخفضة والمتوسطة والعالية.
تخطيط تفويض مضبوط
حلل كل المهارات، وحدد الأذونات التي لا ينبغي اعتمادها تلقائيا، وحضّر أوامر allow صريحة للمهارات التي تمت مراجعتها فقط.
أفضل الممارسات
- شغّل تحليل القراءة فقط قبل استخدام أي أمر تفويض.
- فضّل التفويض الصريح لكل مهارة على أوضاع allow-all أو inject.
- راجع أذونات wildcard المنشأة قبل إضافتها إلى settings.json.
تجنب
- لا تشغّل التفويض على دفعات لمهارات مجتمعية لم تتم مراجعتها.
- لا تتعامل مع قواعد allow المنشأة كدليل على أن المهارة آمنة.
- لا تحقن أوامر allow في ملفات مهارات كثيرة دون التحكم في الإصدارات أو النسخ الاحتياطية.
الأسئلة المتكررة
هل تنفذ هذه المهارة الأوامر المكتشفة؟
يفحص مسار التحليل الموثق ملفات المهارات وينشئ قواعد أذونات. تعدّل أوامر التفويض إعدادات Claude Code.
لماذا تعد هذه المهارة حساسة أمنيا؟
يمكنها إضافة قواعد Bash allow ويمكنها تعديل الإعدادات أو توثيق المهارات في أوضاع الدفعات.
هل ينبغي أن أستخدم allow-all؟
استخدم allow-all فقط بعد مراجعة كل إذن منشأ. التفويض لكل مهارة أكثر أمانا.
هل يمكنها اكتشاف المهارات الخبيثة؟
يمكنها إبراز أنماط الأوامر الخطرة، لكنها لا تغني عن مراجعة أمنية كاملة.
ما الملفات التي تلمسها؟
يشير التوثيق إلى ~/.claude/settings.json وملفات المهارات المثبتة ضمن ~/.claude/skills.
متى تُطبق الأذونات الجديدة؟
تذكر المهارة أن تحديثات الأذونات تُطبق في جلسة جديدة أو بعد تشغيل /clear.
تفاصيل المطور
المؤلف
guo-yuالترخيص
MIT
مراجعة Skillstore
r1
تنبيه الإصدار
لم يعلن المؤلف عن إصدار.
مرجع
1ffa7643651792ccb4bd3b15d924d2c97edff755
حداثة الصيانة
٢٤/٧/٢٠٢٦
الاستخدام
5 تنزيلات · 275 مشاهدات
بنية الملفات
المزيد من guo-yu
عرض الكل📦
share-skill
38مشاركة مهارات Claude باستخدام Git
يصعب إصدار مهارات Claude المحلية ونشرها وإعادة استخدامها عبر أجهزة متعددة. ترشد هذه المهارة عملية الترحيل إلى مستودع، وتهيئة remotes، وإنشاء وثائق للمشاركة.
DevOps والبنية التحتية عرض
📦
port-allocator
38تخصيص منافذ التطوير المحلية
قد تتعارض المشاريع المحلية عندما تبدأ عدة جلسات برمجة بالذكاء الاصطناعي خوادم تطوير. تخصص هذه المهارة نطاقات منافذ يمكن التنبؤ بها وتسجلها لإعادة استخدامها.
DevOps والبنية التحتية عرض
مهارات ذات صلة
عرض الكل📦
building-agents
85بناء وكلاء Claude Code
بواسطة C0ntr0lledCha0s
يتطلب إنشاء وكلاء AI موثوقين مخططات واضحة وأدوات آمنة وخطوات مراجعة قابلة للتكرار. ترشد هذه المهارة تصميم الوكلاء والتحقق منهم وترحيلهم وصيانتهم ضمن سير عمل Claude Code.
البرمجة والتطوير عرض
📦
agent-development
85بناء وكلاء Claude Code
بواسطة Dami-Randle
تصميم وكلاء Claude Code موثوقين صعب من دون بنية واضحة. توفر هذه المهارة قوالب وقواعد تحقق وأمثلة لمطالبات الوكلاء والمشغلات والأدوات والبيانات الوصفية.
البرمجة والتطوير عرض
📦
building-commands
84إنشاء أوامر Claude Code المائلة
بواسطة C0ntr0lledCha0s
تحتاج الفرق إلى سير عمل AI قابلة للتكرار وسهلة الاستدعاء والمراجعة. تساعد هذه المهارة على إنشاء أوامر Claude Code المائلة وتحديثها والتحقق منها وتوثيقها.
البرمجة والتطوير عرض
📦
building-plugins
83بناء مكونات Claude Code الإضافية
بواسطة C0ntr0lledCha0s
يتطلب إنشاء مكونات Claude Code الإضافية بنية صحيحة، والتحقق، والتوثيق، والتغليف الآمن. ترشد هذه المهارة المستخدمين عبر معمارية المكونات الإضافية، والقوالب، والتحقق، وسير عمل النشر.
DevOps والبنية التحتية عرض
📦
building-hooks
83بناء Claude Code Automation Hooks
بواسطة C0ntr0lledCha0s
يمكن لـ Claude Code hooks أتمتة الفحوصات والتنسيق وفرض السياسات، لكن نصوص hook غير الآمنة قد تؤثر في الملفات أو الأوامر المحلية. ترشد هذه المهارة المستخدمين عبر تصميم hooks المنظم والتحقق منها وصيانتها.
DevOps والبنية التحتية عرض
📦
writing-hookify-rules
82كتابة قواعد Hookify لـ Claude Code
بواسطة anthropics
قد يكون من الصعب كتابة قواعد Hook بشكل صحيح عبر أحداث bash والملفات والإيقاف والمطالبات. تمنح هذه المهارة Claude وCodex وClaude Code إرشادات عملية لإنشاء قواعد Hookify واختبارها.
DevOps والبنية التحتية عرض