원클릭으로
nerfctl-grant-allow
Allow nerf tools without prompting (supports glob patterns like nerf-git-*)
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
메뉴
Allow nerf tools without prompting (supports glob patterns like nerf-git-*)
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Safe wrappers for common Unix utilities
Safe wrappers for common Unix utilities
Allow/deny nerf tools by threat profile (read/write ceiling)
Deny nerf tools entirely (supports glob patterns like nerf-git-*)
List nerf tool permissions across all scopes
Reset nerf tools to ask-every-time (supports glob patterns like nerf-git-*)
| name | nerfctl-grant-allow |
| description | Allow nerf tools without prompting (supports glob patterns like nerf-git-*) |
| argument-hint | <scope> <pattern> [--reset-other-scopes] |
| disable-model-invocation | true |
| allowed-tools | Bash |
Allow nerf tools matching the given pattern without prompting. Supports glob patterns
(e.g. nerf-git-* to allow all git tools).
Scope is required and must be one of user (~/.claude/settings.json), project
(.claude/settings.json, committed), or local (.claude/settings.local.json, gitignored).
Pass --reset-other-scopes to clear matching entries from the two scopes you didn't
target, making the chosen scope the sole source of truth for these tools (otherwise
conflicting entries elsewhere are warned about).
Quote all arguments so they are passed to the script unprocessed by the shell.
${CLAUDE_PLUGIN_ROOT}/scripts/nerfctl-grant-allow $ARGUMENTS
Report the output to the user.