website-permissionslisted

Cut the number of permission prompts on a new-website repo to near-zero for the routine build loop, while keeping destructive actions gated. Installs the bundled `.claude/settings.json` allowlist into the project, explains the allow/deny model (npm / astro / playwright / git commit / gh-read / image tools / the link script are pre-approved; `rm -rf`, `git push --force`, `git reset --hard`, and any `wrangler/gh … delete` stay prompted), and safely EXTENDS the allowlist from the commands you keep approving — narrowly, never with a blanket wildcard. The allowlist travels with the repo, so a handoff party also gets the quiet build loop. Trigger phrases: "reduce permission prompts", "too many permission prompts", "stop asking me to approve", "set up permissions for this site", "fewer prompts", "allowlist this repo", "why does it keep asking me".
karero/website-builder · ★ 4 · Web & Frontend · score 74

Install: claude install-skill karero/website-builder

# Website permissions — fewer prompts, same guardrails A build is a tight loop of `npm`/`astro`/`playwright`/`git` calls. Approving each one by hand is friction with no safety benefit — those commands can't hurt you. This skill gets the repo to "quiet for the safe stuff, still asks for the dangerous stuff", and keeps it that way as the project grows. ## 1. Install the bundled allowlist (the 90% fix) The `new-website` kit ships a curated `.claude/settings.json`. Copy it into the repo (this is also scaffold step 3.2 — do it here if it was skipped): ```bash mkdir -p .claude cp ~/.claude/skills/new-website/templates/claude/settings.json .claude/settings.json ``` `.claude/settings.json` is **per-project** and committed, so it travels with the repo — the handoff party inherits the same quiet loop. Restart Claude Code (or reload the project) after editing so the new rules take effect. ## 2. The model — what's pre-approved vs always gated **Pre-approved (`allow`)** — the build loop and read-only inspection: `npm install/ci/run/test/exec`, `astro`, `playwright`, `node`, the **git write subset** (`add`, `commit`, `branch`, `checkout`, `switch`, `merge`, `restore`, `stash`, `fetch`, `pull`, `push`), `gh` **read** verbs (`auth status`, `repo view`, `pr view/list`), `wrangler pages dev` / `whoami`, the image tools (`cwebp`, `avifenc`, `magick`, `oxipng`, `svgo`, `exiftool`, …), file inspection (`ls`/`cat`/`grep`/`rg`/ `find` …), and `bash scripts/check_external_links.sh` (the outgo