permissions-audit

What problem does it solve?

Identifies redundant, empty, overly broad, or inconsistent permissions declarations in Claude's settings by comparing the global ~/.claude/settings.local.json with per-repository .claude/settings.local.json files under the user's ghq root, reducing noise and preventing accidental over-permissioning.

Core Features & Use Cases

• Audits the global permissions.allow baseline and collects project-level permissions from ghq-managed repositories to detect redundancies and coverage overlaps.
• Flags empty arrays, recommends removals, detects overly broad wildcards and subcommand containment rules, and surfaces patterns used across multiple projects for potential global promotion.
• Produces a structured Markdown report and offers safe, backup-first automated refactoring with JSON validation and clear rollback instructions.

Quick Start

Run the permissions-audit skill to scan ~/.claude/settings.local.json and all ghq repositories, produce a categorized audit report, and optionally apply backup-first automatic fixes.