| name | permission-management |
| description | Central authority for Claude Code permissions. Covers permission system (tiered model, read-only, bash, file modification), permission rules (allow, ask, deny), rule precedence, permission modes (default, acceptEdits, plan, bypassPermissions), tool-specific permission rules (Bash patterns, Read/Edit patterns, WebFetch domains, MCP tools), /permissions command, and additionalDirectories. Assists with configuring permission rules, understanding permission modes, and troubleshooting permission issues. Delegates 100% to docs-management skill for official documentation. |
| allowed-tools | Read, Glob, Grep, Skill |
Permission Management Skill
MANDATORY: Invoke docs-management First
STOP - Before providing ANY response about Claude Code permissions:
- INVOKE
docs-management skill
- QUERY for the user's specific topic
- BASE all responses EXCLUSIVELY on official documentation loaded
Skipping this step results in outdated or incorrect information.
Verification Checkpoint
Before responding, verify:
If ANY checkbox is unchecked, STOP and invoke docs-management first.
Overview
Central authority for Claude Code permissions. This skill uses 100% delegation to docs-management - it contains NO duplicated official documentation.
Architecture: Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.
When to Use This Skill
Keywords: permissions, allow rules, deny rules, ask rules, permission modes, defaultMode, acceptEdits, bypassPermissions, plan mode, tool permissions, Bash permissions, Read permissions, Edit permissions, WebFetch permissions, MCP permissions, additionalDirectories, /permissions
Use this skill when:
- Configuring permission rules
- Understanding permission modes
- Setting up tool-specific permissions
- Troubleshooting permission issues
- Adding additional working directories
- Understanding rule precedence
Keyword Registry for docs-management Queries
Use these keywords when querying docs-management skill for official documentation:
Permission System
| Topic | Keywords |
|---|
| Overview | "permission system", "tiered permissions", "approval required" |
| Configuration | "configuring permissions", "/permissions command" |
| Rule Types | "allow rules", "ask rules", "deny rules" |
| Precedence | "rule precedence", "deny > ask > allow" |
Permission Modes
| Topic | Keywords |
|---|
| Default Mode | "default mode", "defaultMode", "standard prompting" |
| Accept Edits | "acceptEdits mode", "auto-accept file edits" |
| Plan Mode | "plan mode", "analyze only", "no modifications" |
| Bypass Mode | "bypassPermissions mode", "skip all prompts" |
Tool-Specific Rules
| Topic | Keywords |
|---|
| Bash Rules | "Bash permissions", "Bash pattern matching", "exact match", "prefix match" |
| Read/Edit Rules | "Read Edit permissions", "gitignore-style patterns" |
| Path Patterns | "absolute path", "home path", "relative path" |
| WebFetch Rules | "WebFetch domain permissions", "domain patterns" |
| MCP Rules | "MCP permissions", "mcp__server", "MCP tool permissions" |
Working Directories
| Topic | Keywords |
|---|
| Additional Dirs | "additionalDirectories", "--add-dir" |
| Working Directory | "working directories", "file access scope" |
Quick Decision Tree
What do you want to do?
- Set up allow rules -> Query docs-management: "allow rules", "auto-approve"
- Set up deny rules -> Query docs-management: "deny rules", "prevent usage"
- Set up ask rules -> Query docs-management: "ask rules", "confirmation required"
- Change permission mode -> Query docs-management: "permission modes", "defaultMode"
- Configure Bash permissions -> Query docs-management: "Bash permissions", "Bash pattern matching"
- Configure file permissions -> Query docs-management: "Read Edit permissions", "gitignore-style"
- Add working directories -> Query docs-management: "additionalDirectories", "--add-dir"
- Configure MCP permissions -> Query docs-management: "MCP permissions", "mcp__server"
Topic Coverage
Permission System Topics
- Tiered permission model (read-only, bash, file modification)
- Allow rules (auto-approve)
- Ask rules (confirmation required)
- Deny rules (prevent usage)
- Rule precedence (deny > ask > allow)
- Permission rule format
Permission Modes Topics
- default mode (standard prompting)
- acceptEdits mode (auto-accept file edits)
- plan mode (analyze only, no modifications)
- bypassPermissions mode (skip all prompts)
Tool Permission Rules
- Bash permission patterns (exact match, prefix match)
- Bash pattern limitations
- Read and Edit gitignore-style patterns
- Path pattern types (absolute, home, relative)
- WebFetch domain permissions
- MCP tool permissions (no wildcards)
- Hooks for custom permission evaluation
Working Directories Topics
- additionalDirectories configuration
- --add-dir CLI flag
- Scope of file access
Troubleshooting Quick Reference
| Issue | Keywords for docs-management |
|---|
| Permission too restrictive | "allow rules", "auto-approve" |
| Permission too permissive | "deny rules", "prevent usage" |
| Wrong mode active | "permission modes", "defaultMode" |
| MCP tools blocked | "MCP permissions", "mcp__server" |
| Can't access files | "additionalDirectories", "--add-dir" |
Related Skills
- sandbox-configuration - For sandboxing and isolation
- enterprise-security - For managed policies
- settings-management - For general configuration
Version History
- v1.0.0 (2025-11-30): Initial release (split from security-meta)
- Focused on permissions only
- Pure delegation architecture
- Comprehensive keyword registry
Last Updated
Date: 2025-11-30
Model: claude-opus-4-5-20251101
