permission-max SKILL.md skillA
permission-max from aktsmm/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add aktsmm/agent-skills/permission-max@git:20261022.387b228Pins git:20261022.387b228 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- aktsmm/agent-skills
- Path
permission-max/SKILL.md- Versions recorded
- 3
- Latest version
- git:20261022.387b228, committed Oct 22, 2026
- First version recorded
- Jul 5, 2026
- Size
- 6,329 bytes
- Repository stars
- 26
- License
- a license file GitHub does not identify
Reduce repeated permission prompts across Microsoft Scout, Copilot CLI, and host tool confirmations with user-approved settings and explicit before/after verification. Use when users ask for permission max, fewer approval prompts, shell allow-list expansion, autoApprove, or diagnosis of repeated Read/Write/PowerShell confirmations.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# permission-max 目的: Microsoft Scout セッション中に頻出する権限確認を減らすため、Scout 側の shell allow list / read-only auto approve / server autoApprove / tool allow map を最大限広く申請し、さらに Copilot CLI / ホスト側の `Read` / `Write` / `PowerShell command` などの確認が出る場合も診断する。 ## When to Use - 「permission max」「権限確認を減らしたい」「shell allow list を広げたい」 - Scout の server/tool `autoApprove` を確認・拡張したい - `Read` / `Write` / `Edit` / `PowerShell command` の確認が繰り返され、Scout と CLI / host のどちらが制御しているか切り分けたい - 別プロセスの `copilot -p` で利用可能な allow flags を確認したい ## 重要な前提 - この Skill はセキュリティ確認を突破しない。必ず現在設定を確認し、変更可能なものだけユーザー承認付きで申請する。 - Scout 側の権限と、Copilot CLI / ホスト側のツール実行確認は別レイヤーとして扱う。 - `Allow everywhere` 相当の完全な無条件許可や、security-sensitive location の警告を消すことは保証しない。警告が残る場合は安全ガードとして扱う。 - パス許可は、Scout が許可する範囲では `<allowed-root>\*` のような確認済み親フォルダ/ワイルドカードを優先する。ただし `m_request_permission_escalation` で変更できるのは shell allow list、tool allow map、autoApproveReadOnly、server autoApprove が中心で、パス単位の警告を常に一括変更できるとは限らない。 - `allow` はフル置換なので、必ず現在の allow list を読み、既存項目 + 追加項目の和集合を `string[]` として渡す。既存項目を落とさない。 - CLI / ホスト側の確認を減らす設定が見つからない場合は、「Scout 側は最大化済みだが CLI 側は別ガードで変更不可」と明示する。推測で「完了」と言わない。 - 危険操作、削除、外部送信、M365送信、サインアウト、サービス停止などは、権限が広くてもユーザーの明示指示と確認を優先する。 ## 対象レイヤー …
Read the whole file at its exact version.
How to install
mdr add aktsmm/agent-skills/permission-max@sha256:8b5846c6e0a80b84The line at the top of this page pins the label git:20261022.387b228, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_eedp27xqhp2tab7w)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Jul 5, 2026 and Oct 22, 2026, about one every 54 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261022.387b228 latest | 2026-10-22 | 387b228 | 6,329 B | A | view · diff |
| git:20260709.e6b8215 | 2026-07-09 | e6b8215 | 6,298 B | A | view · diff |
| git:20260705.848fd9b | 2026-07-05 | 848fd9b | 8,759 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6329 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
aktsmm/agent-skills · 26 stars · license a license file GitHub does not identify · pushed 2026-11-04 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_eedp27xqhp2tab7w GET https://markdownregistry.com/api/v1/resolve?ref=aktsmm/agent-skills/permission-max GET https://markdownregistry.com/api/v1/blob/8b5846c6e0a80b849152691fb48e88b787563fda66cc1abff257a772f92b1fad
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.