jasonwarrenuk/Config: Grant Permission
skills/config-permit/SKILL.md
{{ 𝚫𝚫𝚫 }} Grant a permission rule globally or for the current project
$ install --global
skillsauthnpx skillsauth add jasonwarrenuk/goblin-mode Config: Grant PermissionInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 18, 2026, 7:16 AM173.2s1 file scanned
SKILL.md
- name:
- Config: Grant Permission
- description:
- {{ 𝚫𝚫𝚫 }} Grant a permission rule globally or for the current project
- when_to_use:
- When the user says things like 'allow X', 'add permission for Y', 'stop asking me about Z', or wants a Bash/tool rule added to settings without hand-editing JSON.
- model:
- haiku
- effort:
- low
- disable-model-invocation:
- true
- allowed-tools:
- ["Bash(python3 ~/.claude/library/scripts/config_permit.py:*)", "Read"]
- arguments:
- ["scope", "rule"]
- argument-hint:
- [global|project] [permission rule, e.g. Bash(svu:*)]
Add the permission rule to permissions.allow at the requested scope. Replaces the former config-permit-global / config-permit-project pair; the JSON handling lives in a script so the array append, dedupe and sync are one deterministic command — do not hand-edit the settings files as a fallback.
Steps
-
Both arguments are required. If
$scopeis notglobalorproject, or$ruleis empty, ask rather than guessing — a permission grant is not a place for inference. -
Run:
python3 ~/.claude/library/scripts/config_permit.py $scope "$rule"- global edits
~/.claude/settings.local.jsonc(comments preserved) and runs the settings-sync hook automatically. - project edits
.claude/settings.local.jsonin the current project, creating it if absent.
- global edits
-
Report the script's output verbatim: added, already present, or the error. On exit 2, surface the message and stop — if the script could not find the
allowarray, tell the user the file needs a look rather than editing it yourself.
Related Skills
jasonwarrenuk/Roadmap: Build Zip
tools
VerifiedTrustedCommunity
{{ 𝚫𝚫𝚫 }} Rebuild roadmap-system.zip, the distributable snapshot of the roadmap tooling (scripts, HTML template, conventions reference, and every roadmap-touching skill, including this one).
5SKILL.mdUpdated Jul 21, 2026
jasonwarrenuk/skills/task-suggest
tools
VerifiedTrustedCommunity
--- name: "Suggest: Task" description: "{{ 𝚫𝚫𝚫 }} Suggest the next logical task — grounded in the roadmap's pre-vetted ready-set when one exists, codebase analysis otherwise" when_to_use: "When you don't know what to work on next and want a grounded recommendation rather than picking arbitrarily." model: haiku effort: low disable-model-invocation: true allowed-tools: ["Read", "Glob", "Grep", "Bash(python3:*)", "Bash(npm:*)", "Bash(bun:*)", "Bash(pnpm:*)", "Bash(deno:*)"] argument-hint: [named
5SKILL.mdUpdated Jul 17, 2026
jasonwarrenuk/Roadmap: Migrate
development
VerifiedTrustedCommunity
{{ 𝛀𝛀𝛀 }} Convert an old simple-style roadmap (single Markdown, four statuses, <a name> anchors, roadmaps.json pointer registry) into the rich phase-array format (roadmaps.json source of truth + PHASE task list + prose overview).
5SKILL.mdUpdated Jul 17, 2026
jasonwarrenuk/PR: Create
data-ai
VerifiedTrustedCommunity
{{ ƔƔƔ }} Create a pull request to main — wordy or shiny (with screenshots), ready-for-review or draft
5SKILL.mdUpdated Jul 17, 2026