action-permissionslisted
Install: claude install-skill bb25see-hash/claude-intent-alignment-guard
# Action Permission Manager
Sub-skill of `intent-alignment-guard`. Surfaces and manages what actions are authorized across the four permission planes — with **scoped grants** so a permission can be given to one skill, cron, or routine without touching the global allowlist.
---
## Step 1 — Mode + Action + Planes (single AskUserQuestion call, 3 questions)
**Q1 — Mode** (`header: "Mode"`)
- "Lookup" — show permission matrix for one action across selected planes
- "Grant" — authorize an action for a specific skill, cron, routine, project, or globally
- "Revoke" — remove an authorization from any scope
- "Audit" — list all Tier 3/4 actions found across selected planes
**Q2 — Action** (`header: "Action"`)
Generate 2–4 options from what was mentioned or implied:
- Common Tier 3: `git push`, `Slack send`, `gh pr create`, `gh pr merge`
- Common Tier 2: `git pull`, `git commit`, `Edit`, `Write`
- Common Tier 4: `rm -rf`, `git push --force`
- "All Tier 3/4" — scan comprehensively
**Q3 — Planes** (`header: "Planes"`, `multiSelect: true`)
- "settings.json" — `~/.claude/settings.json` allow[]/deny[]
- "Skills" — grep `~/.claude/skills/*/SKILL.md`
- "Cron jobs" — `CronList` commands
- "Routines" — `/schedule` managed agents
---
## Step 2 — Proceed (second AskUserQuestion call)
**Q4 — Proceed** (`header: "Proceed"`)
- "Run now" *(Recommended)*
- "Show plan first"
- "Cancel"
---
## Step 3 — Context Summary (always shown before executing)
```
• Mode: [Lookup / Grant / Revoke /