Claude Code skill allowed-tools: a one-turn grant, not a sandbox
You add allowed-tools: Bash(git add *) Bash(git commit *) to a skill. You type /commit , and Claude stages and commits without asking. You send one more message, ask for another commit — and the permission prompt is back. Nothing broke. allowed-tools did exactly what it is specified to do. It is just narrower than the name suggests. The one-line version allowed-tools pre-approves the listed tools…
Claude Code's allowed-tools feature is a one-turn grant, not a sandbox. When you add allowed-tools, such as Bash(git add *) or Bash(git commit *), to a skill and invoke it using /commit, Claude stages and commits without asking permission. However, Claude's pre-approval of specific tools expires when you send your next message. The skill remains active, but Claude loses the pre-approval, causing it to prompt for permission again.
The allowed-tools field only specifies which tools do not require a prompt during the current turn, not which tools are restricted. Tools not listed still follow the user's normal permission rules. To remove a tool's permission across all skills, use disallowed-tools. Claude's allowed-tools feature can be applied to bundled scripts within a skill, ensuring the rules match the exact command used by the script.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Auto mode is now the default in Claude Code for Pro, Max, and Team plans simonwillison.net
- Auto Mode will soon be the default in Claude Code — because humans can’t be trusted thenewstack.io
- Claude Code now lets sessions talk to each other on macOS 9to5mac.com
- Anthropic to make Claude Code auto mode default techinasia.com
- Anthropic is turning Claude Code’s auto mode on by default techcrunch.com
- I swapped Claude Code, Codex, and Antigravity for an open-source local alternative, and the difference is massive xda-developers.com
- Claude Code for web substack.com
- Auto mode is now the default in Claude Code claude.com
