claude-settings-author

Analyze Claude Code permission settings for dangerous patterns and sandbox migrations.

2|Updated Jan 15, 2026

Search Tags:#security #permissions #configuration #Claude Code #sandbox #analyze #WebFetch

Ready to run

npx skills add https://github.com/tsilva/claude-skills --skill claude-settings-author

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: claude-settings-author
Source: https://github.com/tsilva/claude-skills/tree/main/plugins/claude-settings-author/skills/claude-settings-author
Command: npx skills add https://github.com/tsilva/claude-skills --skill claude-settings-author

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps teams optimize Claude Code permission settings by identifying dangerous patterns, removing redundant grants, and migrating specific domains to a sandbox-safe network allowlist.

Core Features & Use Cases

Analyze global and project permission rules to flag dangerous patterns and overly specific entries.
Automatically migrate WebFetch domain permissions to sandbox.network.allow when appropriate.
Generate actionable changes and backup configurations to minimize risk during updates.

Quick Start

Use the claude-settings-author skill to scan your global and project settings and report optimization opportunities. For an automated cleanup, run the optimizer against your local project settings with: uv run --with colorama scripts/settings_optimizer.py analyze|clean|auto-fix

Frequently Asked Questions about claude-settings-author

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit Claude Code permission settings for dangerous patterns?▼

You can audit Claude Code permission settings by parsing the JSON configuration to flag dangerous patterns, redundant grants, and overly specific entries. The tool analyzes both global and project-level rules to report optimization opportunities.

Can I migrate WebFetch domain permissions to a sandbox network allowlist?▼

Yes, you can migrate WebFetch domain permissions to a sandbox network allowlist. The tool detects WebFetch usage and sandbox network allowances, automatically migrating specific domains to sandbox.network.allow when appropriate to improve security boundaries.

What is the best way to clean up redundant Claude Code permission rules?▼

The best way to clean up redundant Claude Code permission rules is to run the settings optimizer. It parses JSON settings, identifies redundancies, and generates actionable changes with backup configurations to minimize risk during updates.

Does the settings optimizer support both global and project-level permissions?▼

Yes, the settings optimizer supports both global and project-level permissions. It applies rule analysis and sandbox migration workflows across both scopes, allowing comprehensive audits and cleanups regardless of where the configuration is defined.

How do I automatically fix Claude Code settings after identifying issues?▼

To automatically fix Claude Code settings, run the optimizer with the auto-fix command. It applies generated recommendations directly to your configuration, streamlining the cleanup process after analyzing permission rules and sandbox allowances.