Files
Simone AvogadroandClaude Sonnet 5.5 d891605677 chore(commands): least-privilege allowed-tools for /find-trackers, /find-ads, /neutralize
Pre-approve only the plugin scripts each command runs (bash ${CLAUDE_PLUGIN_ROOT}/... patterns,
verified in headless default-mode runs) instead of every Bash call; drop unused Write/Edit.
install-dep.sh and the Windows PowerShell lines keep prompting. /neutralize: also python3 -I
registry-scan.py, and the decoded dir is a literal path (no ${VAR%.*} expansion) with one script
per Bash call, so nothing triggers an extra approval.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GKSiYpKT5YKAMowGEgUwAw
2026-10-12 10:07:23 +02:00
..