audit-permissions

Original：🇺🇸 English

Translated

Use when reviewing permission prompt frequency, optimizing the allow-list, or resetting the audit log. Triggers on "audit permissions", "permission report", "allow list", "reduce prompts", "what's getting prompted".

7installs

Sourcecamacho/ai-skills

Added on2026-04-09

NPX Install

npx skill4agent add camacho/ai-skills audit-permissions

SKILL.md Content

View Translation Comparison →

Audit Permissions

Analyze permission audit logs and recommend allow-list changes. Wraps the TypeScript analyzer in ai-env.

Args Routing

No args / empty: run report (default)
Args contain "reset" or "clear": archive log and start fresh

Report Mode (default)

1. Generate Report

bash

node --import tsx /Users/patrickcamacho/projects/camacho/ai-env/src/tools/permission-analyzer.ts

Present the full markdown output to the user.

2. Recommended Allow Rules

If the section has entries:

Read

~/.claude/settings.json

, extract

permissions.allow

(default

[]

)

Compute new patterns not already present (case-sensitive exact match)
Show before/after diff of ONLY
```
permissions.allow
```
Ask: "Apply these N safe rules to settings.json?" (plain text y/n — works on all surfaces)
If approved: merge, deduplicate, sort alphabetically, write back with 2-space indent
Never touch keys outside
```
permissions.allow
```
. Never touch
```
permissions.deny
```
.
Confirm what was added

3. Security Warnings

If present: show each pattern with flags and sample commands. Ask: "Add any of these despite the flags? (list numbers, or 'none')"

4. Suppressed Recommendations

List for awareness. Do NOT offer to add — these have danger-level flags.

Done

Summarize: what was added, how many permission prompts should be reduced.

Reset Mode