# Tool Permission Planner

> Design least-privilege tool access for agent workflows, MCP servers, connectors, browser automation, shell commands, and external side effects.

- **Type:** Skill
- **Install:** `agentstack add skill-45ck-skill-harness-tool-permission-planner`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [45ck](https://agentstack.voostack.com/s/45ck)
- **Installs:** 0
- **Category:** [Web & Browser](https://agentstack.voostack.com/c/web-and-browser)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [45ck](https://github.com/45ck)
- **Source:** https://github.com/45ck/skill-harness/tree/main/packs/agent-operating-skills/skills/tool-permission-planner
- **Website:** https://github.com/45ck/skill-harness/releases/tag/v0.1.0

## Install

```sh
agentstack add skill-45ck-skill-harness-tool-permission-planner
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Tool Permission Planner

Use this skill when an agent needs tools beyond local read-only reasoning.

## Process

- Start from user task outcomes, not endpoint completeness.
- List each tool, its side effects, and the data it can expose.
- Choose read-only or dry-run modes first when they can prove the next step.
- Define command, path, network, account, and write boundaries.
- Name approval gates for destructive or externally visible actions.
- Define audit evidence: logs, issue comments, manifests, screenshots, traces, or command output.

## Permission Tiers

- `read`: inspect files, issues, docs, metadata, screenshots
- `write-local`: edit repo files or generated artifacts
- `execute-local`: run tests, builds, formatters, or local validators
- `external-read`: call APIs or remote systems without mutation
- `external-write`: create, update, publish, deploy, merge, or notify
- `destructive`: delete, revoke, reset, drop, overwrite, or irreversibly mutate

## Output

### Tool Surface
### Minimum Required Tier
### Boundaries
### Approval Gates
### Audit Evidence
### Denied Capabilities

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [45ck](https://github.com/45ck)
- **Source:** [45ck/skill-harness](https://github.com/45ck/skill-harness)
- **License:** MIT
- **Homepage:** https://github.com/45ck/skill-harness/releases/tag/v0.1.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-45ck-skill-harness-tool-permission-planner
- Seller: https://agentstack.voostack.com/s/45ck
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.