What problem does it solve?
Repeatedly approving the same Bash commands during Claude Code sessions interrupts workflow. This Skill scans recent session transcripts to find commands you keep manually approving, cross-references them against your current settings.json, and recommends the missing permission entries.
Core Features & Use Cases
- Session-Based Discovery: Extracts Bash commands from the last N days of session JSONL files and identifies which ones are not covered by existing permission patterns.
- Risk Classification: Classifies each uncovered command as GREEN (auto-recommend), YELLOW (recommend with caution), or RED (never auto-allow, e.g. rm -rf, sudo, mix ecto.reset).
- Settings Cleanup: Detects redundant entries, garbage patterns like Bash(done), and deprecated
:* syntax, then merges approved changes without overwriting existing rules.
- Use Case: After two weeks of Elixir development, run the analyzer to discover that
mkdir, mise exec, and mix test were approved 150+ times combined, then add them to settings.json in one interactive triage pass.
Quick Start
Ask the assistant to run the phx-permissions analyzer with --days=14 and --dry-run to preview which Bash permissions should be added to settings.json.