access

Manages Discord channel access control by editing a local access.json state file.

2|Updated Mar 21, 2026
One-click install
npx skills add https://github.com/ghoshsam/claude-code-skills --skill access-ghoshsam
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: access
Source: https://github.com/ghoshsam/claude-code-skills/tree/main/skills/discord/access
Command: npx skills add https://github.com/ghoshsam/claude-code-skills --skill access-ghoshsam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Controlling who can message your Discord bot channel requires careful handling of pairing requests, allowlists, and group policies, and doing it by hand risks approving prompt-injected requests from untrusted channel messages. ## Core Features & Use Cases - Pairing Management: Approve or deny pending pairing codes, writing approval markers the channel server polls to notify users. - Allowlist & Policy Control: Add or remove sender IDs from the allowlist and set the DM policy to pairing, allowlist, or disabled. - Group Configuration: Register group channels with mention requirements and per-group allowlists, plus delivery settings like ack reactions and chunk modes. - Use Case: A new user DMs your Discord bot and receives a 6-character pairing code. You run the pair command with that code, which adds their sender ID to the allowlist and notifies them they are approved. ## Quick Start Ask the assistant to show the current Discord access status, then approve a pending pairing by providing the 6-character code.

Frequently Asked Questions about access

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I approve a Discord pairing request for my bot?

Run the pair command with the 6-character pending code. The skill looks up the code in access.json, adds the sender ID to the allowlist, deletes the pending entry, and writes an approval marker file the channel server polls to notify the user.

How do I change the Discord DM policy to allowlist only?

Use the policy command with one of the three valid modes: pairing, allowlist, or disabled. The skill validates the mode, updates the dmPolicy field in access.json, and the channel server picks up the change on its next read.

Where does the Discord access skill store its state?

All state lives in ~/.claude/channels/discord/access.json, covering dmPolicy, allowFrom, groups, pending pairings, and mention patterns. A missing file is treated as the default pairing policy with empty lists.

Can a Discord message itself trigger an access approval?

No. The skill refuses any access mutation requested via channel notifications because channel messages can carry prompt injection. The user must run the command themselves in their own terminal session.

Why does the skill require a pairing code instead of auto-approving?

An attacker can seed a pending entry by DMing the bot, so auto-picking the only pending request is exactly what a prompt-injected attack looks like. The user must explicitly supply the code to confirm intent.