Skill

auto-permissions-review-install

Installs PreToolUse hook using Claude Haiku to auto-approve read-only tools/simple Bash, review complex Bash/accept-edits, reducing permission prompts in Claude Code sessions.

Bash

security

developer-tools

Install

npx claudepluginhub michaelboeding/skills --plugin skills

Tool Access

This skill uses the workspace's default tool permissions.

Preview

Installs a `PreToolUse` hook that reduces permission prompt fatigue by auto-approving safe operations and sending ambiguous commands to Claude Haiku for review.

Supporting Assets

scripts/ai-review.shscripts/install.sh

SKILL.md

Similar Skills

cache-components

Guides Next.js Cache Components and Partial Prerendering (PPR) with cacheComponents enabled. Implements 'use cache', cacheLife(), cacheTag(), revalidateTag(), static/dynamic optimization, and cache debugging.

cache-components

139.2k

mcp-builder

9 files

Guides building MCP servers enabling LLMs to interact with external services via tools. Covers best practices, TypeScript/Node (MCP SDK), Python (FastMCP).

anthropics-skills-13

124.2k

canvas-design

20 files

Generates original PNG/PDF visual art via design philosophy manifestos for posters, graphics, and static designs on user request.

anthropics-skills-13

124.2k

Stats

Stars10

Forks1

Last CommitApr 6, 2026

Actions

View Source View Plugin View on GitHub View README

Auto Permissions Review

Installs a PreToolUse hook that reduces permission prompt fatigue by auto-approving safe operations and sending ambiguous commands to Claude Haiku for review.

Behavior

Tool	Default mode	Accept-edits mode
`Read`, `Glob`, `Grep`, `LS`, etc.	instant allow	instant allow
Simple Bash (`ls`, `cat`, `find`, `git status`)	instant allow	instant allow
Complex Bash (pipes, substitution)	Haiku reviews	Haiku reviews
`Edit`, `Write`	normal prompt (you decide)	Haiku reviews

Key design choices:

Per-session -- each terminal session independently enables/disables. Multiple sessions can run simultaneously without conflicts.
Read-only operations never prompt -- Read, Glob, Grep, and common Bash reads are auto-approved instantly with no API call.
Ambiguous Bash always goes to Haiku -- piped commands, subshells, and anything not in the read-only pattern list gets reviewed regardless of mode.
Edits respect your permission mode -- in default mode you still approve edits manually. In accept-edits mode (Shift+Tab), Haiku reviews them.

Related Commands

Command	What It Does
`/auto-permissions-review-install`	Install the hook (run once)
`/auto-permissions-review-enable`	Turn on for this session
`/auto-permissions-review-disable`	Turn off for this session

How It Works

User runs /auto-permissions-review-enable -- hook creates ~/.claude/ai-review-sessions/<session_id>
Tool call triggers PreToolUse hook
Hook checks if a file for this session's ID exists
Read-only tools and simple Bash reads are auto-approved instantly
Complex Bash commands go to claude -p --model claude-haiku-4-5-20251001 --permission-mode plan
Write tools check permission mode -- Haiku in accept-edits, normal prompt in default
Haiku responds ALLOW or BLOCK: <reason>
Hook returns the decision to Claude Code

Installation

Run the install script to set everything up:

bash "${CLAUDE_PLUGIN_ROOT}/skills/auto-permissions-review-install/scripts/install.sh"

This will:

Copy ai-review.sh to ~/.claude/hooks/
Register the PreToolUse hook in ~/.claude/settings.json

Workflow

Step 1: Check If Already Installed

[ -f ~/.claude/hooks/ai-review.sh ] && echo "Already installed" || echo "Not installed"

If already installed, tell the user and ask if they want to reinstall.

Step 2: Run the Installer

bash "${CLAUDE_PLUGIN_ROOT}/skills/auto-permissions-review-install/scripts/install.sh"

Step 3: Confirm and Explain

After installation, tell the user:

Auto Permissions Review hook installed.

Usage:
  /auto-permissions-review-enable   -- turn on (this session only)
  /auto-permissions-review-disable  -- turn off (this session only)

Read-only operations are auto-approved instantly.
Ambiguous Bash commands are reviewed by Haiku.
Edits only go through Haiku when accept-edits mode is on (Shift+Tab).
Each session enables independently.

Customization

The hook script is at ~/.claude/hooks/ai-review.sh. Users can:

Change the model (swap claude-haiku-4-5-20251001 for any model)
Add patterns to the read-only Bash allowlist
Modify the Haiku evaluation prompt/rules
Set DEBUG=0 to disable logging

Debug Log

When DEBUG=1 (default), all hook activity is logged to ~/.claude/ai-review.log:

cat ~/.claude/ai-review.log

Requirements

Claude Code CLI (claude command available)
jq installed (brew install jq)