Skip to content

fix(claude-config): add disallowed-tools to audit-pass report-only contract #2420

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kyle-sexton merged 2 commits into from
Aug 12, 2026
Merged

fix(claude-config): add disallowed-tools to audit-pass report-only contract #2420

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a39058c
fix(claude-config): add disallowed-tools to audit-pass report-only co…
cursoragent Aug 12, 2026
ebfabd7
docs(claude-config): state disallowed-tools rationale on audit-pass
cursoragent Aug 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions plugins/claude-config/skills/audit-pass/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@ description: "Run ONE coordinated, ordered, resumable pass over a named target r
argument-hint: "[target] [--fix] [--opinion] [--resume] [--report-to <path>]"
user-invocable: true
disable-model-invocation: false
disallowed-tools: Edit, NotebookEdit
Comment thread
kyle-sexton marked this conversation as resolved.
metadata:
workflow-stage: anytime
summary: Run one coordinated, resumable audit pass over a repo with a single human gate
Expand All @@ -27,6 +28,11 @@ Bare invocation reads and reports. `--fix` is the only mutation path, and it is
| User | **Routed as a recommendation, never edited in place.** A user-scope tree is commonly managed by a dotfiles manager, so an in-place edit is drift the operator's own sync path will fight. |
| Project | The only editable scope, per-finding confirmed. |

The frontmatter carries it mechanically too: `disallowed-tools: Edit, NotebookEdit` removes both
editing tools from the pool while this skill is active, so the report-only contract is a property of
the tool set, not of model obedience. `Write` is kept — run state and the report persist under
`${CLAUDE_PLUGIN_DATA}`.

## Scope boundary (route out)

- **One instruction surface against the model-capability catalog** → `/claude-config:audit-instructions`
Expand Down
Loading