Skills skill-permissions
📦
skill-permissions
Content revision r1 High Risk ⚙️ External commands📁 Filesystem access
Audit Skill Permissions
Claude Code skills can need shell permissions that are hard to review manually. This skill analyzes declared command usage and helps create matching allowlist entries with warnings for broad changes.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "skill-permissions" from https://skillstore.io/skills/guo-yu-skill-permissions.md and its manifest at https://skillstore.io/api/skills/guo-yu-skill-permissions/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "skill-permissions". Analyze the port-allocator skill.
Expected outcome:
- Lists detected commands such as find, ls, cat, and lsof.
- Shows proposed Claude Code allow rules.
- Recommends a specific allow command for that skill.
Using "skill-permissions". Show permissions for all skills.
Expected outcome:
- Displays a table of installed skills and major permission groups.
- Marks skills that need authorization.
- Suggests reviewing results before batch authorization.
Using "skill-permissions". Authorize one reviewed skill.
Expected outcome:
- Reports that permission rules were merged.
- Shows the settings file affected.
- Reminds the user that permissions apply in a new session or after clearing.
Security Audit
High Riskv6 • 7/9/2026 Open versioned report
The skill is a security-sensitive permission management helper, not malware. Most dangerous command hits are documented blocklist examples, but the skill can broaden Claude Code Bash allow rules and batch-modify settings or skill files, so publication should require strong warnings and safer defaults.
3
Files scanned
894
Lines analyzed
115
Review items
0
False positives ignored
Confirmed security concerns (4)
High
Batch Permission Expansion and Skill File Modification
The skill documents allow-all and inject modes that can modify settings.json or add allow commands across installed skills. This creates broad local permission expansion risk even though the documentation warns users.
The behavior is explicitly described in multiple language files and affects configuration plus many skill files. The warnings reduce surprise but do not remove the risk.
High
Overbroad Claude Directory Allow Rules
The generated allow rules include broad access to ~/.claude paths, including Bash(cat ~/.claude/*). These rules can expose sensitive local Claude configuration if granted too broadly.
The allow rules are shown directly in the documented authorization flow. The risk depends on user approval, but the scope is broad and security-sensitive.
Medium
System reconnaissance
- Avoid `inject` or `allow-all` unless you understand the impact
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
System reconnaissance
1. **Conservative analysis** - Only identify explicitly appearing commands, avoid over-authorization
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Capability review items (115)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
場所: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
設定ファイル: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- **権限設定**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- **スキルディレクトリ**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
1. `~/.claude/settings.json` を読み取り
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
Location: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
Config file: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
cat ~/.claude/settings.json 2>/dev/null || echo '{"permissions":{"allow":[]}}'
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
📁 位置: ~/.claude/skills/dangerous-skill
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
📁 位置: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(find ~/.claude/skills *)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
High
Hidden file in home directory
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
場所: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
設定ファイル: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- **権限設定**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- **スキルディレクトリ**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
1. `~/.claude/settings.json` を読み取り
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
| `/skill-permissions inject` | High | Batch modify all skill SKILL.md files |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
| `/skill-permissions allow-all` | Medium | Batch modify settings.json |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
- Avoid `inject` or `allow-all` unless you understand the impact
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
| `/skill-permissions` | Analyze all skills and show permission summary |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
| `/skill-permissions allow-all` | Execute one-time authorization for all skills |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
| `/skill-permissions inject` | Inject allow command into all skills |
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
Convert identified commands to `permissions.allow` rules:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
2. Merge the following permissions to `permissions.allow`:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Shell command substitution
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
Location: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
Config file: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- **Permission config**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- **Skill directory**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
1. Read `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
### 命令: `/skill-permissions allow-all`
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
### 命令: `/skill-permissions inject`
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
为所有 skill 注入 `allow` 子命令:
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
- `allow_override`: 从默认黑名单中移除的命令(谨慎使用)
The documentation allows users to remove patterns from the default blocklist. That is intentional configuration, but it can weaken safeguards around dangerous commands.
Medium
Ruby/shell backtick execution
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
1. **文件修改风险** - `inject` 命令会修改所有 skill 的 SKILL.md 文件
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
2. **权限扩大风险** - `allow-all` 会为所有 skill 添加权限,可能授予过多权限
The documented command can modify many skill files or settings entries. This is intentional functionality, but it creates real permission-expansion and file-modification risk if used without review.
Medium
Ruby/shell backtick execution
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Ruby/shell backtick execution
2. 合并以下权限到 `permissions.allow`:
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
cat ~/.claude/* → Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(cat ~/.claude/*)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
find ~/.claude/skills -name "SKILL.md" -type f 2>/dev/null
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
SKILL_PATH=$(find ~/.claude/skills -type d -name "<skill-name>" 2>/dev/null | head -1)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
cat ~/.claude/settings.json 2>/dev/null || echo '{"permissions":{"allow":[]}}'
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
| `cat ~/.claude/*` | `Bash(cat ~/.claude/*)` |
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
📁 位置: ~/.claude/skills/dangerous-skill
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
📁 位置: ~/.claude/skills/port-allocator
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- **权限配置**: `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- **skill 目录**: `~/.claude/skills/`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
1. 读取 `~/.claude/settings.json`
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(find ~/.claude/skills *)",
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
"Bash(cat ~/.claude/*)"
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(find ~/.claude/skills *)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
- Bash(cat ~/.claude/*)
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Medium
Hidden file access
配置文件: ~/.claude/settings.json
The finding references reading or writing Claude Code settings or skill directories. This is intended permission-management behavior, but it is security-sensitive because it can broaden local tool permissions.
Risk Factors
⚙️ External commands (50)
SKILL.ja.md:138-139 SKILL.ja.md:107 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:44-51 SKILL.md:51-54 SKILL.md:54 SKILL.md:55-60 SKILL.md:60-62 SKILL.md:62-73 SKILL.md:73-77 SKILL.md:77-82 SKILL.md:82-84 SKILL.md:84-94 SKILL.md:94-99 SKILL.md:99-101 SKILL.md:101-107 SKILL.md:107-124 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-127 SKILL.md:127-132 SKILL.md:132-133 SKILL.md:133-134 SKILL.md:134-135 SKILL.md:135-140 SKILL.md:140-141 SKILL.md:141-146 SKILL.md:146-162 SKILL.md:162-163 SKILL.md:163-166 SKILL.md:166-180 SKILL.md:180-184 SKILL.md:184-185 SKILL.md:185-190 SKILL.md:190-192 SKILL.md:192-194 SKILL.md:194-198 SKILL.md:198-199
📁 Filesystem access (50)
SKILL.ja.md:47 SKILL.ja.md:67 SKILL.ja.md:82 SKILL.ja.md:126 SKILL.ja.md:131 SKILL.ja.md:136 SKILL.ja.md:150 SKILL.ja.md:152 SKILL.ja.md:159 SKILL.ja.md:160 SKILL.ja.md:173 SKILL.ja.md:180 SKILL.ja.md:181 SKILL.ja.md:47 SKILL.ja.md:67 SKILL.ja.md:82 SKILL.ja.md:126 SKILL.ja.md:131 SKILL.ja.md:136 SKILL.ja.md:150 SKILL.ja.md:152 SKILL.ja.md:159 SKILL.ja.md:160 SKILL.ja.md:173 SKILL.ja.md:180 SKILL.ja.md:181 SKILL.ja.md:82 SKILL.md:47 SKILL.md:68 SKILL.md:83 SKILL.md:100 SKILL.md:148 SKILL.md:153 SKILL.md:159 SKILL.md:174 SKILL.md:177 SKILL.md:184 SKILL.md:185 SKILL.md:198 SKILL.md:205 SKILL.md:206 SKILL.md:47 SKILL.md:68 SKILL.md:83 SKILL.md:100 SKILL.md:148 SKILL.md:153 SKILL.md:159 SKILL.md:174 SKILL.md:177
Detected Patterns
System reconnaissance×2
Audited by: claude View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/guo-yu-skill-permissions/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/guo-yu-skill-permissions?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/guo-yu-skill-permissions?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/guo-yu-skill-permissions/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/guo-yu-skill-permissions.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
guo-yu. (2026). skill-permissions security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/guo-yu-skill-permissions/audits/6BibTeX citation
@techreport{guo-yu-guo-yu-skill-permissions-2026,
author = {guo-yu},
title = {skill-permissions security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/guo-yu-skill-permissions/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-permissions security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "guo-yu"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/guo-yu-skill-permissions/audits/6"
identifiers:
- type: other
value: "skillstore:guo-yu-skill-permissions:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
71
Community
83
Spec Compliance
What You Can Build
Review a new community skill
Analyze a single downloaded skill before granting Claude Code Bash permissions.
Prepare a local skill set
Summarize permissions across installed skills before a team setup session.
Document permission needs
Generate allow command guidance that explains the permissions a skill requires.
Try These Prompts
Analyze one skill
Use skill-permissions to analyze the permissions required by <skill-name> and explain each requested permission.
Review before authorization
Run the read-only skill permission analysis for <skill-name>. Do not modify settings until I approve the proposed allow rules.
Audit all installed skills
Analyze all installed Claude Code skills and group the results by low, medium, and high permission risk.
Plan controlled authorization
Analyze all skills, identify permissions that should not be auto-approved, and prepare explicit allow commands for only the reviewed skills.
Best Practices
- Run read-only analysis before using any authorization command.
- Prefer explicit per-skill authorization over allow-all or inject modes.
- Review generated wildcard permissions before adding them to settings.json.
Avoid
- Do not run batch authorization for unreviewed community skills.
- Do not treat generated allow rules as proof that a skill is safe.
- Do not inject allow commands into many skill files without version control or backups.
Frequently Asked Questions
Does this skill execute the detected commands?
The documented analysis flow scans skill files and generates permission rules. Authorization commands modify Claude Code settings.
Why is this skill security-sensitive?
It can add Bash allow rules and can modify settings or skill documentation in batch modes.
Should I use allow-all?
Use allow-all only after reviewing every generated permission. Per-skill authorization is safer.
Can it detect malicious skills?
It can highlight dangerous command patterns, but it does not replace a full security review.
What files does it touch?
The documentation references ~/.claude/settings.json and installed skill files under ~/.claude/skills.
When do new permissions apply?
The skill states that permission updates apply in a new session or after running /clear.
Developer Details
Author
guo-yuLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
1ffa7643651792ccb4bd3b15d924d2c97edff755
Maintenance freshness
7/18/2026
Usage
5 downloads · 275 views
File structure