tool-permission-review
Review what an agent is actually allowed to do before you turn it loose — the tool-by-tool audit (each capability's blast radius), the least-privilege pass that removes what the task doesn't need, the dangerous-combination check, and the allow/ask/deny tiering. Use when asked review my agent's permissions, what can this agent actually do, lock down my agent's tools, or is this MCP/tool set safe to grant. Produces the permission inventory with blast radius, the least-privilege cuts, the dangerous-combo flags, and the allow/ask/deny assignments.
npx skills add mohitagw15856/pm-claude-skills --skill tool-permission-review --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Tool Permission Review Skill An agent's danger isn't its intelligence — it's its *permissions*. A brilliant agent that can only read is safe; a mediocre one that can send email, run shell commands, and read your filesystem is a breach waiting for a bad prompt or a hijacked page. Permission review is the security discipline every agent setup skips: inventory what it can actually do (tools, MCP servers, computer use, each with its real blast radius), cut everything the task doesn't need (least privilege — the single highest-leverage security move), flag the *combinations* that are dangerous together even when each is fine alone, and tier the survivors into allow / ask / deny. ## What This Skill Produces - **The permission inventory** — every tool/capability the agent has, each with its blast radius (what's the worst it enables) - **The least-privilege cuts** — the capabilities the task doesn't need, removed with the reasoning - **The dangerous-combination flags** — the tool pairs that are safe alone and dangerous together (read-secrets + network = exfiltration) - **The allow/ask/deny tiering** — each surviving capability assigned, with ask-gates on the irreversible ## Required Inpu
- What This Skill Produces
- Required Inputs
- Framework: The Review Rules
- Output Format
- The Inventory (by blast radius)
- Least-Privilege Cuts
- Dangerous Combinations
- Allow / Ask / Deny
- Autonomy Adjustments (if autonomous)
- Quality Checks
- Anti-Patterns
What does the tool-permission-review skill do?
Review what an agent is actually allowed to do before you turn it loose — the tool-by-tool audit (each capability's blast radius), the least-privilege pass that removes what the task doesn't need, the dangerous-combination check, and the allow/ask/deny tiering. Use when asked review my agent's permissions, what can this agent actually do, lock down my agent's tools, or is this MCP/tool set safe to grant. Produces the permission inventory with blast radius, the least-privilege cuts, the dangerous-combo flags, and the allow/ask/deny assignments.
How do I install it?
Run `npx skills add mohitagw15856/pm-claude-skills --skill tool-permission-review --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mohitagw15856/pm-claude-skills, a repository with 1,255 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.