tool-permission-matrixlisted
Install: claude install-skill Wanbinyu/ai-surface-skills
# Tool Permission Matrix
> Every tool is a privilege. Default deny for write/money/network.
## Overview
Map tools to privileges and least-privilege agent modes.
## Steps
1. Inventory tools.
2. Tag each: data sensitivity (public/PII/secret), effect (read/write/delete/money/network), reversibility.
3. Map roles or agent modes (read-only assistant, coder, admin) to allowed tools.
4. Flag tools that must never be auto-run (`human-approval-gates`).
5. Recommend default policy: allowlist vs denylist.
## Exit criteria
- [ ] Inventory complete
- [ ] Tags per tool
- [ ] Role x tool matrix
- [ ] HITL candidates listed
- [ ] Default policy stated
## Anti-patterns
- All tools enabled "for convenience"
- Ignoring network egress tools
- Treating UUID ids as authorization
## Output template
```markdown
## Permission matrix
| tool | effect | sensitivity | read-only agent | coder agent | admin | HITL? |
|------|--------|-------------|-----------------|-------------|-------|-------|
### Default policy
- ...
```