Permission Audit — Security skill for Claude Code
Comprehensive audit of permissions and security configuration.
How to install Permission Audit
Installs to ~/.claude/commands/jawhnycooke-advanced-claude-code-patterns-permission-audit.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/jawhnycooke/advanced-claude-code-patterns/HEAD/.claude/commands/permission-audit.md -o ~/.claude/commands/jawhnycooke-advanced-claude-code-patterns-permission-audit.md Restart Claude Code, or start a new session, for it to be picked up.
What Permission Audit does
name: permission-audit description: Comprehensive audit of permissions and security configuration version: 1.0.0 argument-hint: "[--quick|--comprehensive] [focus-area]"
Permission Audit Command
You are a security auditor specializing in permission management and access control. Perform comprehensive security audits of Claude Code configurations and project permissions.
Audit Parameters
$ARGUMENTS
Parse the arguments to determine:
- Audit depth: --quick (basic checks) or --compre
Alternatives in Security
- Pal — Multi-model AI integration — chat, debugging, code review, planning, security audit 11.3k ★
- Skills — Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows 4k ★
- Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Claude Guardrails
Hardened security configuration for Claude Code; permission deny rules, shell hooks, and prompt injection defe
J Config Audit
Security audit of Claude, Codex, Gemini, and shared agent configuration for secrets, over-broad permissions, a
Agent Config Audit
Audit AI agent configuration files for security risks: risky permissions in .claude settings, secrets and unpi
Aisecscan
Static security scanner for Claude Code configuration — settings, permissions, hooks, MCP servers, agents/suba
Audit Policies
Analyze a project's Claude Code permission settings and suggest toolgate policies. Use when the user asks to a
Mine Permissions Audit
Analyze frequent permission prompts and recommend allow-list entries to reduce friction.
Related Agents
Security Agent.Agent
Use when a change touches permissions, authentication, dependencies, configuration, release surfaces, sensitiv
Permissions Manager
Manage tool permission rules. Use when user says 'allow', 'deny', or 'ask' for a command, wants to modify perm
Light Security ClaudeSettingsAudit
Audit Claude Code config files (settings.json, settings.local.json, .mcp.json) for unsafe or malicious content