Guardrail Optimizer

Leading word: allowlist — the set of outside-cwd paths AND dangerous-command patterns the guardrail permits without prompting; this skill finds candidates and adds them.

Prerequisites

• Node.js ≥ 24 (native TypeScript support via --experimental-strip-types)
• Python3 available (helper scripts are stdlib-only)
• Session JSONL files under ~/.pi/agent/sessions/

Flow

The skill analyzes two independent dimensions of guardrail friction:

1. Path access — outside-cwd paths that trigger pathAccess prompts
2. Command execution — bash commands that trigger permissionGate prompts

Both scanners share the same --sessions, --cwd, --limit, and --global flags. Run them in parallel for efficiency.