Auto permissions review install

Skill michaelboeding/skills/skills/auto-permissions-review-install

Install an AI-powered permission review hook that uses Claude Haiku to evaluate tool call safety before execution. Per-session, auto-approves read-only operations, sends ambiguous Bash commands to Haiku, and only reviews edits in accept-edits mode. Use when setting up auto-approve with AI review, reducing permission fatigue, or wanting Claude to review its own tool calls.From its SKILL.md

Install

npx -y skills add michaelboeding/skills --skill auto-permissions-review-install

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

SKILL.md

4.1 KB, as published. Nobody here has run it

Auto Permissions Review

Installs a PreToolUse hook that reduces permission prompt fatigue by auto-approving safe operations and sending ambiguous commands to Claude Haiku for review.

Behavior

Tool	Default mode	Accept-edits mode
`Read`, `Glob`, `Grep`, `LS`, etc.	instant allow	instant allow
Simple Bash (`ls`, `cat`, `find`, `git status`)	instant allow	instant allow
Complex Bash (pipes, substitution)	Haiku reviews	Haiku reviews
`Edit`, `Write`	normal prompt (you decide)	Haiku reviews

Key design choices:

Per-session -- each terminal session independently enables/disables. Multiple sessions can run simultaneously without conflicts.
Read-only operations never prompt -- Read, Glob, Grep, and common Bash reads are auto-approved instantly with no API call.
Ambiguous Bash always goes to Haiku -- piped commands, subshells, and anything not in the read-only pattern list gets reviewed regardless of mode.
Edits respect your permission mode -- in default mode you still approve edits manually. In accept-edits mode (Shift+Tab), Haiku reviews them.

Related Commands

Command	What It Does
`/auto-permissions-review-install`	Install the hook (run once)
`/auto-permissions-review-enable`	Turn on for this session
`/auto-permissions-review-disable`	Turn off for this session

How It Works

User runs /auto-permissions-review-enable -- hook creates ~/.claude/ai-review-sessions/<session_id>
Tool call triggers PreToolUse hook
Hook checks if a file for this session's ID exists
Read-only tools and simple Bash reads are auto-approved instantly
Complex Bash commands go to claude -p --model claude-haiku-4-5-20251001 --permission-mode plan
Write tools check permission mode -- Haiku in accept-edits, normal prompt in default
Haiku responds ALLOW or BLOCK: <reason>
Hook returns the decision to Claude Code

Installation

Run the install script to set everything up:

bash "${CLAUDE_PLUGIN_ROOT}/skills/auto-permissions-review-install/scripts/install.sh"

This will:

Copy ai-review.sh to ~/.claude/hooks/
Register the PreToolUse hook in ~/.claude/settings.json

Workflow

Step 1: Check If Already Installed

[ -f ~/.claude/hooks/ai-review.sh ] && echo "Already installed" || echo "Not installed"

If already installed, tell the user and ask if they want to reinstall.

Step 2: Run the Installer

bash "${CLAUDE_PLUGIN_ROOT}/skills/auto-permissions-review-install/scripts/install.sh"

Step 3: Confirm and Explain

After installation, tell the user:

Auto Permissions Review hook installed.

Usage:
  /auto-permissions-review-enable   -- turn on (this session only)
  /auto-permissions-review-disable  -- turn off (this session only)

Read-only operations are auto-approved instantly.
Ambiguous Bash commands are reviewed by Haiku.
Edits only go through Haiku when accept-edits mode is on (Shift+Tab).
Each session enables independently.

Customization

The hook script is at ~/.claude/hooks/ai-review.sh. Users can:

Change the model (swap claude-haiku-4-5-20251001 for any model)
Add patterns to the read-only Bash allowlist
Modify the Haiku evaluation prompt/rules
Set DEBUG=0 to disable logging

Debug Log

When DEBUG=1 (default), all hook activity is logged to ~/.claude/ai-review.log:

cat ~/.claude/ai-review.log

Requirements

Claude Code CLI (claude command available)
jq installed (brew install jq)