Habilidades skill-permissions
📦
skill-permissions
Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos📁 Acceso al sistema de archivos
Auditar permisos de skills
Las skills de Claude Code pueden necesitar permisos de shell que son difíciles de revisar manualmente. Esta skill analiza el uso declarado de comandos y ayuda a crear entradas de allowlist coincidentes con advertencias para cambios amplios.
Compatible con: Claude Codex Code(CC)
Detente y solicita confirmación antes de instalar.
Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "skill-permissions" from https://skillstore.io/skills/guo-yu-skill-permissions.md and its manifest at https://skillstore.io/api/skills/guo-yu-skill-permissions/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "skill-permissions". Analiza la skill port-allocator.
Resultado esperado:
- Enumera comandos detectados como find, ls, cat y lsof.
- Muestra las reglas allow propuestas para Claude Code.
- Recomienda un comando allow específico para esa skill.
Usando "skill-permissions". Muestra los permisos de todas las skills.
Resultado esperado:
- Muestra una tabla de skills instaladas y grupos principales de permisos.
- Marca las skills que necesitan autorización.
- Sugiere revisar los resultados antes de la autorización por lotes.
Usando "skill-permissions". Autoriza una skill revisada.
Resultado esperado:
- Informa que las reglas de permisos se fusionaron.
- Muestra el archivo de configuración afectado.
- Recuerda al usuario que los permisos se aplican en una nueva sesión o después de limpiar.
Auditoría de seguridad
Riesgo altov6 • 9/7/2026 Abrir el informe versionado
The skill is a security-sensitive permission management helper, not malware. Most dangerous command hits are documented blocklist examples, but the skill can broaden Claude Code Bash allow rules and batch-modify settings or skill files, so publication should require strong warnings and safer defaults.
3
Archivos escaneados
894
Líneas analizadas
115
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (4)
Alto
Batch Permission Expansion and Skill File Modification
The skill documents allow-all and inject modes that can modify settings.json or add allow commands across installed skills. This creates broad local permission expansion risk even though the documentation warns users.
The behavior is explicitly described in multiple language files and affects configuration plus many skill files. The warnings reduce surprise but do not remove the risk.
Alto
Overbroad Claude Directory Allow Rules
The generated allow rules include broad access to ~/.claude paths, including Bash(cat ~/.claude/*). These rules can expose sensitive local Claude configuration if granted too broadly.
The allow rules are shown directly in the documented authorization flow. The risk depends on user approval, but the scope is broad and security-sensitive.
Medio
System reconnaissance
- Avoid `inject` or `allow-all` unless you understand the impact
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
System reconnaissance
1. **Conservative analysis** - Only identify explicitly appearing commands, avoid over-authorization
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Elementos de revisión de capacidades (115)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
場所: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
設定ファイル: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- **権限設定**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- **スキルディレクトリ**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
1. `~/.claude/settings.json` を読み取り
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
Location: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
Config file: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
cat ~/.claude/settings.json 2>/dev/null || echo '{"permissions":{"allow":[]}}'
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
📁 位置: ~/.claude/skills/dangerous-skill
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
📁 位置: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(find ~/.claude/skills *)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Alto
Hidden file in home directory
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
場所: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
設定ファイル: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- **権限設定**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- **スキルディレクトリ**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
1. `~/.claude/settings.json` を読み取り
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
| `/skill-permissions inject` | High | Batch modify all skill SKILL.md files |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
| `/skill-permissions allow-all` | Medium | Batch modify settings.json |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
- Avoid `inject` or `allow-all` unless you understand the impact
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
| `/skill-permissions` | Analyze all skills and show permission summary |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
| `/skill-permissions allow-all` | Execute one-time authorization for all skills |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
| `/skill-permissions inject` | Inject allow command into all skills |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
Convert identified commands to `permissions.allow` rules:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
2. Merge the following permissions to `permissions.allow`:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Shell command substitution
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
Location: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
Config file: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
### 命令: `/skill-permissions allow-all`
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
### 命令: `/skill-permissions inject`
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
为所有 skill 注入 `allow` 子命令:
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
- `allow_override`: 从默认黑名单中移除的命令(谨慎使用)
The documentation allows users to remove patterns from the default blocklist. That is intentional configuration, but it can weaken safeguards around dangerous commands.
Medio
Ruby/shell backtick execution
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
1. **文件修改风险** - `inject` 命令会修改所有 skill 的 SKILL.md 文件
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
2. **权限扩大风险** - `allow-all` 会为所有 skill 添加权限,可能授予过多权限
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medio
Ruby/shell backtick execution
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Ruby/shell backtick execution
2. 合并以下权限到 `permissions.allow`:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
cat ~/.claude/settings.json 2>/dev/null || echo '{"permissions":{"allow":[]}}'
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
📁 位置: ~/.claude/skills/dangerous-skill
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
📁 位置: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(find ~/.claude/skills *)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medio
Hidden file access
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Factores de riesgo
⚙️ Comandos externos (50)
SKILL.ja.md:138-139 SKILL.ja.md:107 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:44-51 SKILL.md:51-54 SKILL.md:54 SKILL.md:55-60 SKILL.md:60-62 SKILL.md:62-73 SKILL.md:73-77 SKILL.md:77-82 SKILL.md:82-84 SKILL.md:84-94 SKILL.md:94-99 SKILL.md:99-101 SKILL.md:101-107 SKILL.md:107-124 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-127 SKILL.md:127-132 SKILL.md:132-133 SKILL.md:133-134 SKILL.md:134-135 SKILL.md:135-140 SKILL.md:140-141 SKILL.md:141-146 SKILL.md:146-162 SKILL.md:162-163 SKILL.md:163-166 SKILL.md:166-180 SKILL.md:180-184 SKILL.md:184-185 SKILL.md:185-190 SKILL.md:190-192 SKILL.md:192-194 SKILL.md:194-198 SKILL.md:198-199
📁 Acceso al sistema de archivos (50)
SKILL.ja.md:47 SKILL.ja.md:67 SKILL.ja.md:82 SKILL.ja.md:126 SKILL.ja.md:131 SKILL.ja.md:136 SKILL.ja.md:150 SKILL.ja.md:152 SKILL.ja.md:159 SKILL.ja.md:160 SKILL.ja.md:173 SKILL.ja.md:180 SKILL.ja.md:181 SKILL.ja.md:47 SKILL.ja.md:67 SKILL.ja.md:82 SKILL.ja.md:126 SKILL.ja.md:131 SKILL.ja.md:136 SKILL.ja.md:150 SKILL.ja.md:152 SKILL.ja.md:159 SKILL.ja.md:160 SKILL.ja.md:173 SKILL.ja.md:180 SKILL.ja.md:181 SKILL.ja.md:82 SKILL.md:47 SKILL.md:68 SKILL.md:83 SKILL.md:100 SKILL.md:148 SKILL.md:153 SKILL.md:159 SKILL.md:174 SKILL.md:177 SKILL.md:184 SKILL.md:185 SKILL.md:198 SKILL.md:205 SKILL.md:206 SKILL.md:47 SKILL.md:68 SKILL.md:83 SKILL.md:100 SKILL.md:148 SKILL.md:153 SKILL.md:159 SKILL.md:174 SKILL.md:177
Patrones detectados
System reconnaissance×2
Auditado por: claude Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/guo-yu-skill-permissions/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/guo-yu-skill-permissions?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/guo-yu-skill-permissions?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/guo-yu-skill-permissions/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/guo-yu-skill-permissions.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
guo-yu. (2026). skill-permissions security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/guo-yu-skill-permissions/audits/6Cita BibTeX
@techreport{guo-yu-guo-yu-skill-permissions-2026,
author = {guo-yu},
title = {skill-permissions security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/guo-yu-skill-permissions/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-permissions security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "guo-yu"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/guo-yu-skill-permissions/audits/6"
identifiers:
- type: other
value: "skillstore:guo-yu-skill-permissions:audit:6"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 55
Arquitectura
85
Mantenibilidad
87
Contenido
71
Comunidad
83
Cumplimiento de la especificación
Lo que puedes crear
Revisar una nueva skill de la comunidad
Analiza una sola skill descargada antes de conceder permisos Bash de Claude Code.
Preparar un conjunto local de skills
Resume los permisos de las skills instaladas antes de una sesión de configuración del equipo.
Documentar necesidades de permisos
Genera orientación de comandos allow que explica los permisos que requiere una skill.
Prueba estos prompts
Analizar una skill
Usa skill-permissions para analizar los permisos requeridos por <skill-name> y explicar cada permiso solicitado.
Revisar antes de autorizar
Ejecuta el análisis de permisos de skills en modo de solo lectura para <skill-name>. No modifiques la configuración hasta que apruebe las reglas allow propuestas.
Auditar todas las skills instaladas
Analiza todas las skills de Claude Code instaladas y agrupa los resultados por riesgo de permisos bajo, medio y alto.
Planificar autorización controlada
Analiza todas las skills, identifica permisos que no deberían aprobarse automáticamente y prepara comandos allow explícitos solo para las skills revisadas.
Mejores prácticas
- Ejecuta un análisis de solo lectura antes de usar cualquier comando de autorización.
- Prefiere la autorización explícita por skill en lugar de los modos allow-all o inject.
- Revisa los permisos con comodines generados antes de agregarlos a settings.json.
Evitar
- No ejecutes autorización por lotes para skills de la comunidad sin revisar.
- No trates las reglas allow generadas como prueba de que una skill es segura.
- No inyectes comandos allow en muchos archivos de skills sin control de versiones o copias de seguridad.
Preguntas frecuentes
¿Esta skill ejecuta los comandos detectados?
El flujo de análisis documentado escanea archivos de skills y genera reglas de permisos. Los comandos de autorización modifican la configuración de Claude Code.
¿Por qué esta skill es sensible para la seguridad?
Puede agregar reglas allow de Bash y puede modificar la configuración o la documentación de skills en modos por lotes.
¿Debería usar allow-all?
Usa allow-all solo después de revisar cada permiso generado. La autorización por skill es más segura.
¿Puede detectar skills maliciosas?
Puede resaltar patrones de comandos peligrosos, pero no reemplaza una revisión de seguridad completa.
¿Qué archivos toca?
La documentación hace referencia a ~/.claude/settings.json y a archivos de skills instalados en ~/.claude/skills.
¿Cuándo se aplican los nuevos permisos?
La skill indica que las actualizaciones de permisos se aplican en una nueva sesión o después de ejecutar /clear.
Detalles del desarrollador
Autor
guo-yuLicencia
MIT
Revisión de Skillstore
r1
Aviso de versión
El autor no declaró una versión.
Ref.
1ffa7643651792ccb4bd3b15d924d2c97edff755
Actualidad del mantenimiento
21/7/2026
Uso
5 descargas · 275 vistas
Estructura de archivos