Permissions Audit

permissions-audit

A Claude Code plugin for auditing and organizing permissions settings.

Features

• Audit permissions: Analyze all permissions across global and project settings files
• Identify issues: Detect one-time permissions, redundant entries, and global/local conflicts
• Cleanup recommendations: Suggest consolidation to wildcard notation
• Security review: Highlight potentially dangerous permissions
• Reference settings: Provide recommended settings as a baseline

Installation

From GitHub

claude plugin install makikub/claude-code-plugin/permissions-audit@github

Manual Installation

claude plugin install /path/to/claude-code-plugin/permissions-audit

Usage

Invoke the skill with any of these trigger phrases:

• "audit permissions"
• "clean up settings"
• "organize settings.json"
• "permissions inventory"

The skill will:

1. Read all three settings files:

   • ~/.claude/settings.json (global)
   • .claude/settings.json (project shared)
   • .claude/settings.local.json (project local)

2. Analyze for common issues:

   • One-time permissions that should be generalized
   • Permissions that can be consolidated with wildcards
   • Conflicts between global and local settings
   • Potentially dangerous permissions

3. Ask for your preferences on key decisions

4. Provide actionable recommendations

Settings Files

File	Scope	Purpose
~/.claude/settings.json	Global	Universal commands (git, cat, jq, etc.)
.claude/settings.json	Project	Project-specific tools (gradlew, npm, etc.)
.claude/settings.local.json	Project	Temporary permissions (keep empty)

License

MIT