Does Permission Doctor modify my settings files?

No, Permission Doctor is a strictly read-only diagnostic tool. it analyzes and reports on issues without performing any file modifications.

What kind of security risks does it detect?

It identifies over 24 suspicious patterns, including access to critical system directories, dangerous command patterns, and overly broad wildcard permissions.

Can it distinguish between global and local settings?

Yes, it analyzes the relationship between global and local configuration to identify redundant permissions and ensures marketplace skills are correctly scoped.

How do I fix the issues found by Permission Doctor?

Permission Doctor identifies the issues and provides recommendations; you can then use the companion 'permission-fix' skill or manual editing to resolve them.

Permission Doctor

Name: Permission Doctor
Author: cuioss

bycuioss

安全与测试

Diagnoses and audits Claude Code permission settings to identify security risks, syntax errors, and redundant configurations.

关于

Permission Doctor is a specialized diagnostic tool for Claude Code environments that ensures your security settings are robust, efficient, and error-free. By performing read-only analysis on both global and local settings files, it identifies dangerous security anti-patterns, detects redundant permissions that clutter your configuration, and validates syntax according to standardized patterns. This skill acts as a safety layer for developers, helping them understand their permission architecture and surface potential vulnerabilities without making any unintended changes to the filesystem.

主要功能

Redundancy analysis between global and local configuration files
Architecture analysis for global versus project-specific permissions
Security anti-pattern detection with severity scoring (High/Medium/Low)
Automated permission syntax and path format validation
Read-only diagnostic reports that never modify configuration files
0 GitHub stars

使用场景

Auditing security permissions to find over-privileged or risky access patterns
Debugging permission-related failures by validating syntax and structure
Cleaning up configuration files by identifying duplicate permissions across scopes

关于

主要功能

Redundancy analysis between global and local configuration files
Architecture analysis for global versus project-specific permissions
Security anti-pattern detection with severity scoring (High/Medium/Low)
Automated permission syntax and path format validation
Read-only diagnostic reports that never modify configuration files
0 GitHub stars

使用场景

Auditing security permissions to find over-privileged or risky access patterns
Debugging permission-related failures by validating syntax and structure
Cleaning up configuration files by identifying duplicate permissions across scopes