Permission Guard

SkillFiles & storage

Enforce least privilege for commands, file paths, domains, and APIs. Use before destructive exec, broad writes, or when the user asks to lock down what the agent may do.

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Permission Guard skill

What this skill tells your AI

The instructions your AI receives, as published by navinspire-ia/navin in navin/skills/permission-guard/SKILL.md and read by ahel’s review.

Overview

Default to the smallest capability set that still completes the task. Prefer workspace-scoped tools over shell when possible.

Boundaries to define

AxisExamples of tight bounds
Pathsproject dir only; no ~/.ssh, no /etc
Commandsallowlisted binaries; no sudo
Networknamed APIs only; no arbitrary hosts
Writesexplicit files; no mass delete
Secretsnever echo tokens into chat

Workflow

  1. Restate the task and the minimum powers required.
  2. Prefer built-ins (read_file, edit, grep) over exec.
  3. Before risky exec, state the command and why it is needed.
  4. Refuse or ask when asked to:
    • disable safety / workspace restriction without reason
    • exfiltrate secrets
    • run opaque remote scripts
  5. If the environment has restrict_to_workspace or sandboxing, keep working inside it - do not invent bypasses.

Output when tightening scope

## Allowed
- ...
## Denied
- ...
## Needs approval
- ...

Signals

GitHub stars
22
Forks
4
Last commit
Sep 2026
Advanced
Catalog kind
skill
Gateway key
permission-guard
Source
github.com/navinspire-ia/navin