Permission Guard

SkillFiles & storage

Enforce least privilege for commands, file paths, domains, and APIs. Use before destructive exec, broad writes, or when the user asks to lock down what the agent may do.

Use Permission Guard in Claude, ChatGPT or Ahel Desktop

Free. Sign in, add Permission Guard and connect your AI. About a minute.

Also: Claude Code · Cursor · Codex

Then ask your AI: use the Permission Guard skill

Details

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Add Ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Permission GuardStart free

What this skill tells your AI

The instructions your AI receives, as published by navinspire-ia/navin in navin/skills/permission-guard/SKILL.md and read by Ahel’s review.

Overview

Default to the smallest capability set that still completes the task. Prefer workspace-scoped tools over shell when possible.

Boundaries to define

AxisExamples of tight bounds
Pathsproject dir only; no ~/.ssh, no /etc
Commandsallowlisted binaries; no sudo
Networknamed APIs only; no arbitrary hosts
Writesexplicit files; no mass delete
Secretsnever echo tokens into chat

Workflow

  1. Restate the task and the minimum powers required.
  2. Prefer built-ins (read_file, edit, grep) over exec.
  3. Before risky exec, state the command and why it is needed.
  4. Refuse or ask when asked to:
    • disable safety / workspace restriction without reason
    • exfiltrate secrets
    • run opaque remote scripts
  5. If the environment has restrict_to_workspace or sandboxing, keep working inside it - do not invent bypasses.

Output when tightening scope

## Allowed
- ...
## Denied
- ...
## Needs approval
- ...

Signals

GitHub stars
36
Forks
4
Last commit
Oct 2026
Advanced
Item type
skill
Key
permission-guard
Source
github.com/navinspire-ia/navin