{
  "id": 384471,
  "title": "Claude Code skill allowed-tools: a one-turn grant, not a sandbox",
  "url": "https://urgent.news/2026/08/09/claude-code-skill-allowed-tools-a-one-turn-grant-not-a-sandbox",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-09T14:49:21.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/rulestack/claude-code-skill-allowed-tools-a-one-turn-grant-not-a-sandbox-27p4"
  },
  "original_language": "en",
  "account": "Claude Code's allowed-tools feature is a one-turn grant, not a sandbox. When you add allowed-tools, such as Bash(git add *) or Bash(git commit *), to a skill and invoke it using /commit, Claude stages and commits without asking permission. However, Claude's pre-approval of specific tools expires when you send your next message. The skill remains active, but Claude loses the pre-approval, causing it to prompt for permission again. The allowed-tools field only specifies which tools do not require a prompt during the current turn, not which tools are restricted. Tools not listed still follow the user's normal permission rules. To remove a tool's permission across all skills, use disallowed-tools. Claude's allowed-tools feature can be applied to bundled scripts within a skill, ensuring the rules match the exact command used by the script.",
  "summary": "You add allowed-tools: Bash(git add *) Bash(git commit *) to a skill. You type /commit , and Claude stages and commits without asking. You send one more message, ask for another commit — and the permission prompt is back. Nothing broke. allowed-tools did exactly what it is specified to do. It is just narrower than the name suggests. The one-line version allowed-tools pre-approves the listed tools…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 9,
    "also_reported_by": [
      {
        "outlet": "The New Stack",
        "title": "Auto Mode will soon be the default in Claude Code — because humans can’t be trusted",
        "url": "https://urgent.news/2026/08/07/auto-mode-will-soon-be-the-default-in-claude-code-because-humans-cant",
        "published": "2026-08-07T21:42:44.000Z"
      },
      {
        "outlet": "9to5Mac",
        "title": "Claude Code now lets sessions talk to each other on macOS",
        "url": "https://urgent.news/2026/08/07/claude-code-now-lets-sessions-talk-to-each-other-on-macos",
        "published": "2026-08-07T22:29:59.000Z"
      },
      {
        "outlet": "Simon Willison from Simon Willison’s Newsletter",
        "title": "the Claude Code shared session",
        "url": "https://urgent.news/2026/08/08/the-claude-code-shared-session",
        "published": "2026-08-08T00:27:54.000Z"
      },
      {
        "outlet": "XDA Developers",
        "title": "I changed one setting in Claude Code, and my token burn dropped by 45%",
        "url": "https://urgent.news/2026/08/08/i-changed-one-setting-in-claude-code-and-my-token-burn-dropped-by-45",
        "published": "2026-08-08T22:17:49.000Z"
      },
      {
        "outlet": "Simon Willison",
        "title": "Auto mode is now the default in Claude Code for Pro, Max, and Team plans",
        "url": "https://urgent.news/2026/08/08/auto-mode-is-now-the-default-in-claude-code-for-pro-max-and-team-plans",
        "published": "2026-08-08T22:36:03.000Z"
      },
      {
        "outlet": "TechCrunch",
        "title": "Anthropic is turning Claude Code’s auto mode on by default",
        "url": "https://urgent.news/2026/08/09/anthropic-is-turning-claude-codes-auto-mode-on-by-default",
        "published": "2026-08-09T19:20:32.000Z"
      },
      {
        "outlet": "Tech in Asia",
        "title": "Anthropic to make Claude Code auto mode default",
        "url": "https://urgent.news/2026/08/10/anthropic-to-make-claude-code-auto-mode-default",
        "published": "2026-08-10T00:03:12.000Z"
      },
      {
        "outlet": "Hacker News",
        "title": "Auto mode is now the default in Claude Code",
        "url": "https://urgent.news/2026/08/10/auto-mode-is-now-the-default-in-claude-code",
        "published": "2026-08-10T03:50:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}