permission-tuner

Analyzes permission denial patterns and generates allow and deny rules for Claude Code settings.

2.8k|277|Updated Feb 1, 2026
One-click install
npx skills add https://github.com/rohitg00/pro-workflow --skill permission-tuner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: permission-tuner
Source: https://github.com/rohitg00/pro-workflow/tree/main/skills/permission-tuner
Command: npx skills add https://github.com/rohitg00/pro-workflow --skill permission-tuner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Repeated permission prompts interrupt your flow during AI coding sessions, forcing you to manually approve the same safe commands over and over while still needing protection against destructive operations.

Core Features & Use Cases

  • Permission Pattern Analysis: Scans current settings.json files to identify existing allow, deny, and ask rules.
  • Risk-Grouped Rule Generation: Classifies tools and commands into safe (Read, Glob, Grep, read-only git), medium-risk (Edit, Write, git commit), and dangerous (rm -rf, git push --force) categories.
  • Approval-Gated Application: Presents recommended rules for user approval before applying them, with an estimate of prompts saved per session.
  • Use Case: After a session where you approved npm test and git status dozens of times, run this Skill to generate alwaysAllow rules for those commands while keeping destructive operations blocked.

Quick Start

Ask the AI to analyze my recent permission approvals and generate optimized allow and deny rules for my Claude Code settings.

Frequently Asked Questions about permission-tuner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I reduce permission prompts in Claude Code?

Analyze your approval patterns and add frequently-approved safe commands to the alwaysAllow list in .claude/settings.json. Read-only tools like Read, Glob, Grep, and git status are safe candidates for auto-approval.

What commands are safe to auto-approve in Claude Code permissions?

Read-only operations are safe to auto-approve: Read, Glob, Grep, git status, git diff, git log, npm test, lint, and typecheck commands. These have no side effects and cannot modify files or remote state.

Which commands should stay in the deny list?

Destructive operations should always be denied: rm -rf, git push --force, git reset --hard, and any command with --force or --no-verify flags. These can cause irreversible data loss or affect remote repositories.

Where are Claude Code permission rules stored?

Permission rules live in the permissions section of .claude/settings.json at the project level or ~/.claude/settings.json at the user level. Each file contains allow, deny, and ask arrays with tool and command patterns.

Does the permission tuner apply rules automatically?

No, it always presents the recommended rules grouped by risk level for user approval before applying them. It also includes an estimate of how many prompts per session the new rules would save.