Individual skill
audit-permissions
This skill should be used when the user asks to "audit claude permissions", "audit permissions", "review local claude settings", "promote permissions to global", "clean up claude settings", "find permission patterns", or wants to identify project-local Claude Code permissions that should be added to global configuration.
configs/claude/plugins/cc-maintenance/skills/audit-permissions/SKILL.md
Source commit d8eef802756c1829954547875d5680a0c0c854fa
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 10, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 464
- Repository last updated
- Nov 8, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- nix Repository topic
- nix-dotfiles Repository topic
- nix-expressions Repository topic
- nixpkgs Repository topic
- dotfiles Repository topic
- nix-darwin Repository topic
- nix-configs Repository topic
- neovim Repository topic
- home-manager Repository topic
- nix-flake Repository topic
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesSKILL.mdcore · 16,476 bytesscripts/cleanup-redundant.pyruns · 5,394 bytesscripts/discover-settings.shruns · 635 bytesscripts/extract-permissions.pyruns · 1,954 bytes
Read excerpt
# Audit Claude Permissions
Scan project-local Claude Code settings files, aggregate permission patterns, and recommend promotions to global configuration.
## Workflow Overview
This audit runs in three phases, each as a separate task. Use TaskCreate at the start to create all three tasks, then work through them sequentially with user input via AskUserQuestion.
- **Phase 1: Promote to Global** — Requires user judgment. Present candidates, get decisions, apply to global config.
- **Phase 2: Automated Redundancy Cleanup** — Script-driven. After Phase 1 promotions, run cleanup script to remove local permissions now covered by global. Present for sanity-checking, then apply.
- **Phase 3: Judgment Calls** — Everything requiring user input: security hygiene, policy conflicts, one-off cruft, empty file deletion, moderate-risk items.
## Initial Setup
