Permission Guard
SkillFiles & storageEnforce least privilege for commands, file paths, domains, and APIs. Use before destructive exec, broad writes, or when the user asks to lock down what the agent may do.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Permission Guard skill
What this skill tells your AI
The instructions your AI receives, as published by navinspire-ia/navin in navin/skills/permission-guard/SKILL.md and read by ahel’s review.
Overview
Default to the smallest capability set that still completes the task. Prefer workspace-scoped tools over shell when possible.
Boundaries to define
| Axis | Examples of tight bounds |
|---|---|
| Paths | project dir only; no ~/.ssh, no /etc |
| Commands | allowlisted binaries; no sudo |
| Network | named APIs only; no arbitrary hosts |
| Writes | explicit files; no mass delete |
| Secrets | never echo tokens into chat |
Workflow
- Restate the task and the minimum powers required.
- Prefer built-ins (
read_file,edit,grep) overexec. - Before risky
exec, state the command and why it is needed. - Refuse or ask when asked to:
- disable safety / workspace restriction without reason
- exfiltrate secrets
- run opaque remote scripts
- If the environment has
restrict_to_workspaceor sandboxing, keep working inside it - do not invent bypasses.
Output when tightening scope
## Allowed
- ...
## Denied
- ...
## Needs approval
- ...
Signals
- GitHub stars
- 22
- Forks
- 4
- Last commit
- Sep 2026
Advanced
- Catalog kind
- skill
- Gateway key
permission-guard- Source
- github.com/navinspire-ia/navin