agent-permissions
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Bash script (
dippy-with-auto-fallback.sh) and instructions to configure it as a PreToolUse hook in the agent'ssettings.json. This script acts as a proxy for the Dippy permission manager to filter prompts during autonomous operations. - [SAFE]: The skill manages the agent's internal security configuration files (
~/.dippy/config,.dippy,settings.json, and.claude/settings.local.json). This is the core functionality and is used to define the boundaries of the agent's capabilities. - [SAFE]: The skill documentation and the provided
config.exampleinclude security best practices, such asdeny-redirectrules to prevent the agent from writing to sensitive files like.env, SSH keys (id_rsa), and PEM files. - [SAFE]: The skill implements a human-in-the-loop requirement by recommending
askordenyrules for destructive operations and uses a specific token[ASK]to ensure critical prompts reach the user even in autonomous modes.
Audit Metadata