Permission Management Skill
MANDATORY: Invoke docs-management First
STOP - Before providing ANY response about Claude Code permissions:
- INVOKE
docs-management skill
- QUERY for the user's specific topic
- BASE all responses EXCLUSIVELY on official documentation loaded
Skipping this step results in outdated or incorrect information.
Verification Checkpoint
Before responding, verify:
If ANY checkbox is unchecked, STOP and invoke docs-management first.
Overview
Central authority for Claude Code permissions. This skill uses 100% delegation to docs-management - it contains NO duplicated official documentation.
Architecture: Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.
When to Use This Skill
Keywords: permissions, allow rules, deny rules, ask rules, permission modes, defaultMode, acceptEdits, bypassPermissions, plan mode, tool permissions, Bash permissions, Read permissions, Edit permissions, WebFetch permissions, MCP permissions, additionalDirectories, /permissions
Use this skill when:
- Configuring permission rules
- Understanding permission modes
- Setting up tool-specific permissions
- Troubleshooting permission issues
- Adding additional working directories
- Understanding rule precedence
Keyword Registry for docs-management Queries
Use these keywords when querying docs-management skill for official documentation:
Permission System
| Topic |
Keywords |
| Overview |
"permission system", "tiered permissions", "approval required" |
| Configuration |
"configuring permissions", "/permissions command" |
| Rule Types |
"allow rules", "ask rules", "deny rules" |
| Precedence |
"rule precedence", "deny > ask > allow" |
Permission Modes
⚠️ STALENESS WARNING: Do NOT hardcode permission mode names or values.
Query docs-management for the authoritative list of permission modes.
| Topic |
Query Pattern |
What You'll Find |
| All Modes |
"iam.md permission modes" |
Complete list of available modes |
| Mode Behavior |
"iam.md defaultMode acceptEdits" |
Mode descriptions and effects |
| Mode Configuration |
"iam.md configuring permission mode" |
How to set modes |
Tool-Specific Rules
⚠️ STALENESS WARNING: Do NOT hardcode tool names or pattern syntax.
Query docs-management for the authoritative list of tools and permission patterns.
| Topic |
Query Pattern |
What You'll Find |
| Bash Rules |
"iam.md Bash permissions pattern matching" |
Bash permission syntax |
| File Rules |
"iam.md Read Edit permissions gitignore" |
File permission patterns |
| Path Patterns |
"iam.md path pattern types" |
Absolute, home, relative patterns |
| WebFetch Rules |
"iam.md WebFetch domain permissions" |
Domain pattern syntax |
| MCP Rules |
"iam.md MCP permissions mcp__server" |
MCP tool permission syntax |
Security Considerations (v2.1.6+)
⚠️ SECURITY: These topics cover security-sensitive permission behaviors.
Query docs-management for the authoritative guidance.
| Topic |
Query Pattern |
What You'll Find |
| Wildcard + Shell Operators |
"iam.md wildcard rules shell operators compound commands" |
SECURITY FIX (v2.1.7): Wildcard rules matching compound commands |
| Line Continuation Bypass |
"iam.md permission bypass line continuation" |
SECURITY FIX (v2.1.6): Shell line continuation escape prevention |
Working Directories
| Topic |
Keywords |
| Additional Dirs |
"additionalDirectories", "--add-dir" |
| Working Directory |
"working directories", "file access scope" |
Quick Decision Tree
What do you want to do?
- Set up allow rules -> Query docs-management: "allow rules", "auto-approve"
- Set up deny rules -> Query docs-management: "deny rules", "prevent usage"
- Set up ask rules -> Query docs-management: "ask rules", "confirmation required"
- Change permission mode -> Query docs-management: "permission modes", "defaultMode"
- Configure Bash permissions -> Query docs-management: "Bash permissions", "Bash pattern matching"
- Configure file permissions -> Query docs-management: "Read Edit permissions", "gitignore-style"
- Add working directories -> Query docs-management: "additionalDirectories", "--add-dir"
- Configure MCP permissions -> Query docs-management: "MCP permissions", "mcp__server"
Topic Coverage
Permission System Topics
- Tiered permission model (read-only, bash, file modification)
- Allow rules (auto-approve)
- Ask rules (confirmation required)
- Deny rules (prevent usage)
- Rule precedence (deny > ask > allow)
- Permission rule format
Permission Modes Topics
- default mode (standard prompting)
- acceptEdits mode (auto-accept file edits)
- plan mode (analyze only, no modifications)
- bypassPermissions mode (skip all prompts)
Tool Permission Rules
- Bash permission patterns (exact match, prefix match)
- Bash pattern limitations
- Read and Edit gitignore-style patterns
- Path pattern types (absolute, home, relative)
- WebFetch domain permissions
- MCP tool permissions (no wildcards)
- Hooks for custom permission evaluation
Working Directories Topics
- additionalDirectories configuration
- --add-dir CLI flag
- Scope of file access
Troubleshooting Quick Reference
| Issue |
Keywords for docs-management |
| Permission too restrictive |
"allow rules", "auto-approve" |
| Permission too permissive |
"deny rules", "prevent usage" |
| Wrong mode active |
"permission modes", "defaultMode" |
| MCP tools blocked |
"MCP permissions", "mcp__server" |
| Can't access files |
"additionalDirectories", "--add-dir" |
Related Skills
- sandbox-configuration - For sandboxing and isolation
- enterprise-security - For managed policies
- settings-management - For general configuration
Version History
Last Updated
Date: 2026-01-16
Model: claude-opus-4-5-20251101
1---2name: permission-management3description: Central authority for Claude Code permissions. Covers permission system (tiered model, read-only, bash, file modification), permission rules (allow, ask, deny), rule precedence, permission modes (default, acceptEdits, plan, bypassPermissions), tool-specific permission rules (Bash patterns, Read/Edit patterns, WebFetch domains, MCP tools), /permissions command, and additionalDirectories. Assists with configuring permission rules, understanding permission modes, and troubleshooting permission issues. Delegates 100% to docs-management skill for official documentation.4---5
6# Permission Management Skill
7
8## MANDATORY: Invoke docs-management First
9
10> **STOP - Before providing ANY response about Claude Code permissions:**
11>
12> 1. **INVOKE** `docs-management` skill
13> 2. **QUERY** for the user's specific topic
14> 3. **BASE** all responses EXCLUSIVELY on official documentation loaded
15>
16> **Skipping this step results in outdated or incorrect information.**
17
18### Verification Checkpoint
19
20Before responding, verify:
21
22- [ ] Did I invoke docs-management skill?
23- [ ] Did official documentation load?
24- [ ] Is my response based EXCLUSIVELY on official docs?
25
26If ANY checkbox is unchecked, STOP and invoke docs-management first.
27
28---
29
30## Overview
31
32Central authority for Claude Code permissions. This skill uses **100% delegation to docs-management** - it contains NO duplicated official documentation.
33
34**Architecture:** Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.
35
36## When to Use This Skill
37
38**Keywords:** permissions, allow rules, deny rules, ask rules, permission modes, defaultMode, acceptEdits, bypassPermissions, plan mode, tool permissions, Bash permissions, Read permissions, Edit permissions, WebFetch permissions, MCP permissions, additionalDirectories, /permissions
39
40**Use this skill when:**
41
42- Configuring permission rules
43- Understanding permission modes
44- Setting up tool-specific permissions
45- Troubleshooting permission issues
46- Adding additional working directories
47- Understanding rule precedence
48
49## Keyword Registry for docs-management Queries
50
51Use these keywords when querying docs-management skill for official documentation:
52
53### Permission System
54
55| Topic | Keywords |
56| --- | --- |
57| Overview | "permission system", "tiered permissions", "approval required" |
58| Configuration | "configuring permissions", "/permissions command" |
59| Rule Types | "allow rules", "ask rules", "deny rules" |
60| Precedence | "rule precedence", "deny > ask > allow" |
61
62### Permission Modes
63
64> ⚠️ **STALENESS WARNING:** Do NOT hardcode permission mode names or values.
65> Query docs-management for the authoritative list of permission modes.
66
67| Topic | Query Pattern | What You'll Find |
68| --- | --- | --- |
69| All Modes | "iam.md permission modes" | Complete list of available modes |
70| Mode Behavior | "iam.md defaultMode acceptEdits" | Mode descriptions and effects |
71| Mode Configuration | "iam.md configuring permission mode" | How to set modes |
72
73### Tool-Specific Rules
74
75> ⚠️ **STALENESS WARNING:** Do NOT hardcode tool names or pattern syntax.
76> Query docs-management for the authoritative list of tools and permission patterns.
77
78| Topic | Query Pattern | What You'll Find |
79| --- | --- | --- |
80| Bash Rules | "iam.md Bash permissions pattern matching" | Bash permission syntax |
81| File Rules | "iam.md Read Edit permissions gitignore" | File permission patterns |
82| Path Patterns | "iam.md path pattern types" | Absolute, home, relative patterns |
83| WebFetch Rules | "iam.md WebFetch domain permissions" | Domain pattern syntax |
84| MCP Rules | "iam.md MCP permissions mcp__server" | MCP tool permission syntax |
85
86### Security Considerations (v2.1.6+)
87
88> ⚠️ **SECURITY:** These topics cover security-sensitive permission behaviors.
89> Query docs-management for the authoritative guidance.
90
91| Topic | Query Pattern | What You'll Find |
92| --- | --- | --- |
93| Wildcard + Shell Operators | "iam.md wildcard rules shell operators compound commands" | SECURITY FIX (v2.1.7): Wildcard rules matching compound commands |
94| Line Continuation Bypass | "iam.md permission bypass line continuation" | SECURITY FIX (v2.1.6): Shell line continuation escape prevention |
95
96### Working Directories
97
98| Topic | Keywords |
99| --- | --- |
100| Additional Dirs | "additionalDirectories", "--add-dir" |
101| Working Directory | "working directories", "file access scope" |
102
103## Quick Decision Tree
104
105**What do you want to do?**
106
1071. **Set up allow rules** -> Query docs-management: "allow rules", "auto-approve"
1082. **Set up deny rules** -> Query docs-management: "deny rules", "prevent usage"
1093. **Set up ask rules** -> Query docs-management: "ask rules", "confirmation required"
1104. **Change permission mode** -> Query docs-management: "permission modes", "defaultMode"
1115. **Configure Bash permissions** -> Query docs-management: "Bash permissions", "Bash pattern matching"
1126. **Configure file permissions** -> Query docs-management: "Read Edit permissions", "gitignore-style"
1137. **Add working directories** -> Query docs-management: "additionalDirectories", "--add-dir"
1148. **Configure MCP permissions** -> Query docs-management: "MCP permissions", "mcp__server"
115
116## Topic Coverage
117
118### Permission System Topics
119
120- Tiered permission model (read-only, bash, file modification)
121- Allow rules (auto-approve)
122- Ask rules (confirmation required)
123- Deny rules (prevent usage)
124- Rule precedence (deny > ask > allow)
125- Permission rule format
126
127### Permission Modes Topics
128
129- default mode (standard prompting)
130- acceptEdits mode (auto-accept file edits)
131- plan mode (analyze only, no modifications)
132- bypassPermissions mode (skip all prompts)
133
134### Tool Permission Rules
135
136- Bash permission patterns (exact match, prefix match)
137- Bash pattern limitations
138- Read and Edit gitignore-style patterns
139- Path pattern types (absolute, home, relative)
140- WebFetch domain permissions
141- MCP tool permissions (no wildcards)
142- Hooks for custom permission evaluation
143
144### Working Directories Topics
145
146- additionalDirectories configuration
147- --add-dir CLI flag
148- Scope of file access
149
150## Troubleshooting Quick Reference
151
152| Issue | Keywords for docs-management |
153| --- | --- |
154| Permission too restrictive | "allow rules", "auto-approve" |
155| Permission too permissive | "deny rules", "prevent usage" |
156| Wrong mode active | "permission modes", "defaultMode" |
157| MCP tools blocked | "MCP permissions", "mcp__server" |
158| Can't access files | "additionalDirectories", "--add-dir" |
159
160## Related Skills
161
162- **sandbox-configuration** - For sandboxing and isolation
163- **enterprise-security** - For managed policies
164- **settings-management** - For general configuration
165
166## Version History
167
168- **v1.1.0** (2026-01-16): Security fixes keyword registry
169 - Added Security Considerations section (v2.1.6+)
170 - Added wildcard + shell operators security fix keywords (v2.1.7)
171 - Added line continuation bypass security fix keywords (v2.1.6)
172
173- **v1.0.0** (2025-11-30): Initial release (split from security-meta)
174 - Focused on permissions only
175 - Pure delegation architecture
176 - Comprehensive keyword registry
177
178---
179
180## Last Updated
181
182**Date:** 2026-01-16
183**Model:** claude-opus-4-5-20251101
majiayu000