Configure Claude Code permissions, sandbox mode, allow/deny rules, and audit security settings. Use when the user needs to set up or review permission modes, sandbox configuration, allow/deny tool patterns, or telemetry settings. Triggers on: 'permissions', 'sandbox', 'allow', 'deny', 'security', 'telemetry', 'restrict access', 'unsafe commands', 'permission denied'.
Configure, audit, and harden Claude Code permissions and security settings.
Read current settings — Check:
settings.json (project and global ~/.claude/settings.json)Audit permissions — Verify:
"Bash")rm -rfDROP TABLECheck sandbox — If enabled:
Review telemetry:
Recommend hardening:
Apply changes — Edit settings.json with user approval only
## Security Audit Report
### Current Configuration
- Permission mode: [mode]
- Sandbox: enabled/disabled
- Telemetry: enabled/disabled
### Allow/Deny Rules
| Pattern | Type | Status |
|---------|------|--------|
| ... | allow/deny | OK/Risky |
### Recommendations
1. [Specific hardening action]
If settings.json is corrupted or missing, offer to create a safe default configuration.