← All skills
audit-permission-state
67 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By melodic-software/claude-code-plugins (GitHub) · coding · 30 stars · scanned at commit 677e798
When the bundled fewer-permission-prompts skill resolves in this session, prefer it to reduce prompts via an allowlist; this skill to see the state in effect. Report-only: merges every settings scope into the allow/ask/deny set in effect with source and precedence per rule, and flags allow rules auto mode drops. Use when: 'what permissions are actually in effect', 'which of my rules survive auto mode', 'is my managed policy being read'. A rule ignored for its shape: `audit-permission-grants`.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.
Found in 2 places.
Connects to the internet
The author does not mention this.
Found in 38 places.
Show 17 more
- plugins/harness-config/skills/audit-permission-state/scripts/automode-entry-diff.test.sh, line 112
effective allow scopes=user precedence_basis=uncontested WebFetch(domain:example.com) - plugins/harness-config/skills/audit-permission-state/scripts/automode-entry-diff.test.sh, line 119
assert_contains "a non-shell rule is untouched by classifyAllShell" "$OUT" "entry-diff kept scopes=user WebFetch(domain:example.com)" - plugins/harness-config/skills/audit-permission-state/scripts/automode-entry-diff.test.sh, line 388
jq -n '{permissions:{allow:["WebFetch(domain:example.com)"]}}' >"$FX/proj/.claude/settings.json" - plugins/harness-config/skills/audit-permission-state/scripts/automode-entry-diff.test.sh, line 401
assert_contains "the non-shell project rule is kept" "$E2E" "entry-diff kept scopes=project WebFetch(domain:example.com)" - plugins/harness-config/skills/audit-permission-state/scripts/managed-conformance.test.sh, line 45
rule managed file deny WebFetch - plugins/harness-config/skills/audit-permission-state/scripts/managed-conformance.test.sh, line 91
rule managed file ask WebFetch - plugins/harness-config/skills/audit-permission-state/scripts/managed-conformance.test.sh, line 92
rule project settings deny WebFetch - plugins/harness-config/skills/audit-permission-state/scripts/managed-conformance.test.sh, line 96
assert_contains "a managed ask beaten by a lower deny is loosenable" "$OUT" "managed loosenable rule the managed ask rule WebFetch" - plugins/harness-config/skills/audit-permission-state/scripts/managed-conformance.test.sh, line 144
rule managed file allow WebFetch(domain:example.com) - plugins/harness-config/skills/audit-permission-state/scripts/managed-conformance.test.sh, line 145
rule user settings ask WebFetch - plugins/harness-config/skills/audit-permission-state/scripts/managed-conformance.test.sh, line 149
assert_contains "a whole-tool ask does the same" "$OUT" "whole-tool ask rule (WebFetch)" - plugins/harness-config/skills/audit-permission-state/scripts/managed-conformance.test.sh, line 157
rule user settings deny WebFetch - plugins/harness-config/skills/audit-permission-state/scripts/no-writes.test.sh, line 41
jq -n '{permissions:{allow:["Bash(git status)","Bash(python*)"],deny:["WebFetch"]}}' >"$FX/proj/.claude/settings.json" - plugins/harness-config/skills/audit-permission-state/scripts/permission-merge.test.sh, line 65
rule user settings allow WebFetch - plugins/harness-config/skills/audit-permission-state/scripts/permission-merge.test.sh, line 66
rule project settings ask WebFetch - plugins/harness-config/skills/audit-permission-state/scripts/permission-merge.test.sh, line 70
assert_contains "ask outranks allow" "$OUT" "effective ask scopes=project precedence_basis=evaluation-order WebFetch" - plugins/harness-config/skills/audit-permission-state/scripts/permission-merge.test.sh, line 71
assert_contains "the allow beneath an ask is inert" "$OUT" "inert allow scopes=user outranked_by=ask WebFetch"
and 18 more places
Downloads and installs other software
The author does not mention this.
Found in 7 places.
Show 4 more
Changes files outside its own folder
The author does not mention this.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'audit-permission-state' ] || [ -L ~/.agents/skills/'audit-permission-state' ]; then echo 'A skill folder named audit-permission-state already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/melodic-software/claude-code-plugins' "$d" && git -C "$d" checkout --quiet '677e7988f432dacb5e2d4df2b124f96da8e8f9f3' -- 'plugins/harness-config/skills/audit-permission-state' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/harness-config/skills/audit-permission-state' ~/.agents/skills/'audit-permission-state' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'audit-permission-state' ~/.claude/skills/'audit-permission-state' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for melodic-software/claude-code-plugins shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/melodic-software/claude-code-plugins/)
Score history
| Date | Version | Score |
|---|
| 2026-11-09 | 677e798 | 67 |
| 2026-11-07 | 81c7244 | 67 |