tools-permission-doctor

Identifies Claude Code permission misconfigurations including duplicates, wildcards and anti-patterns without modifying files.

4|Updated Jan 11, 2026
One-click install
npx skills add https://github.com/cuioss/plan-marshall --skill tools-permission-doctor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tools-permission-doctor
Source: https://github.com/cuioss/plan-marshall/tree/main/marketplace/bundles/plan-marshall/skills/tools-permission-doctor
Command: npx skills add https://github.com/cuioss/plan-marshall --skill tools-permission-doctor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Diagnose permission misconfigurations in Claude Code settings without modifying files, surfacing duplicates and anti-patterns.

Core Features & Use Cases

  • Detect exact duplicates between global and local settings to avoid redundant permissions.
  • Identify risky patterns and security anti-patterns to improve permission hygiene.
  • Validate permission syntax and structure against established standards.

Quick Start

Run the detect-redundant command with your global and local settings to surface exact duplicates and marketplace permissions that should reside in global scope.

Frequently Asked Questions about tools-permission-doctor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check Claude Code settings for permission misconfigurations?

Check Claude Code permission misconfigurations by analyzing global, project, and marketplace settings to surface exact duplicates, broad wildcards, and anti-patterns across Read, Write, Edit, Bash, Skill, SlashCommand, and WebFetch patterns.

What are common permission anti-patterns in Claude Code configurations?

Common permission anti-patterns in Claude Code include exact duplicates between global and local settings, broad wildcards, and invalid syntax for Read, Write, Edit, Bash, Skill, SlashCommand, and WebFetch permission patterns.

Can I validate Claude Code permission syntax without modifying files?

Yes, you can validate Claude Code permission syntax without modifying files. Read-only analysis inspects settings to detect redundant permissions and validate format against established standards, outputting structured results suitable for remediation.

How do I detect redundant permissions between global and local Claude Code settings?

Detect redundant permissions between global and local Claude Code settings by running a diagnostic command that compares both scopes to surface exact duplicates and identify marketplace permissions that should reside in global scope.

Does permission analysis support Bash, WebFetch, and SlashCommand patterns?

Yes, permission analysis supports Bash, WebFetch, and SlashCommand patterns. It validates format and structure for these alongside Read, Write, Edit, and Skill patterns to ensure comprehensive permission hygiene across settings.

What should I do when Claude Code permission validation surfaces duplicates?

When Claude Code permission validation surfaces duplicates, use the structured results output for remediation. The read-only analysis identifies exact duplicates between global and local settings so you can manually remove redundant permissions.