Tool allowlist

An agent gets the tools its current task needs and nothing else. This skill gives you a harness-neutral policy file, a linter that fails blocklist keys, wildcard allows, dead allows and unprotected credentials, and a converter that writes Claude Code's permissions object with defaultMode: "dontAsk" for unattended runs.

No account or API key needed. Node 18 or later; both scripts have zero dependencies.

Principles