mcpField
P
permission-manager

permission-manager

github.com/mskaduSecurity154 installsUpdated 21w ago
Repository

About permission-manager

An opencode skill for reviewing and adjusting command and skill permissions. It audits configuration, recommends safe read-only commands for auto-approval, and validates changes after user-confirmed edits.

Key features

  1. 01Summarizes allowed commands
  2. 02Recommends read-only auto-approvals
  3. 03Adds or removes command permissions
  4. 04Configures skill access rules
  5. 05Audits and validates permission settings

Use cases

  1. 01Reviewing existing opencode permissions
  2. 02Limiting auto-approved commands to safe reads
  3. 03Changing skill allow, deny, or ask rules
  4. 04Checking permission configuration before use

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/mskadu/opencode-agent-skills --skill permission-manager

After installing, type/permission-managerin Claude Code to confirm it loaded.

Bundled filesREADME.md

Details

From the project README

What I do

  • Review and summarize currently always-allowed commands
  • Suggest safe read-only commands for auto-approval
  • Add or remove commands from the allow list in opencode.json
  • Configure skill-level permissions (allow/deny/ask) with wildcard patterns
  • Audit permission configs for security and usability

When to use me

Use this when optimizing opencode's permission settings, reviewing allowed commands, or configuring skill access controls.

Workflow Steps

  1. Read current config: Load ~/.config/opencode/opencode.json or project-level opencode.json
  2. Summarize permissions: Identify currently allowed commands and skill permissions
  3. Suggest additions: Propose safe read-only commands for auto-allow (see recommended list below)
  4. Apply changes: Edit the config to add/remove permission entries
  5. Validate: Ensure JSON is valid after changes

Complements opencode's built-in allow/deny/ask permissions by auditing current config and recommending adjustments through conversation.

Key Rules

  • Never allow commands that modify files, commit, push, or change system state
  • Use wildcards appropriately (e.g., git status* not just git status)
  • Confirm with user before modifying permission config
  • Distinguish between bash command permissions and skill permissions
  • Keep config organized: group related commands together

How to trigger me

Use the Task tool with the permission-manager subagent type:

/permissions

Or in natural language, ask opencode to "manage opencode permissions" or "review allowed commands".

Comments

Markdown supported