mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-13 22:26:49 +00:00
Replace the one-off literal allow entry for a specific `gh run download` invocation with the `XDG_CACHE_HOME=* gh run download *` wildcard that mirrors the existing `view`/`list` env-prefix precedents, and move the `Skill(update-config*)` wildcard from `allow` to `ask` so settings-file mutations (permission rules, hooks, sandbox scope) always prompt — the skill can otherwise self-escalate the agent's own permission surface. Document both entries in settings.md with matching Env-Prefix and Privilege-Escalation rationales. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Tooling guides 🧰
This directory contains contributor guidance for project tools. Its scope is how repository-standard tools should be used, when they apply, and where they fit into the wider workflow.