Read-only · local-first · deterministic

Know what your agent permissions really allow.

PermitLint checks Claude Code allow and deny rules plus Codex approval, sandbox, permission-profile, and exec-policy settings—without executing configuration code.

View source & docs Latest release Privacy details

Codex

Audit approval, sandbox, profiles, and exec-policy prefixes.

codex plugin marketplace add \
  https://codeberg.org/automa-tan/permitlint.git
codex plugin add permitlint@permitlint-tools

Claude Code

Catch broad grants, wildcard traps, and incomplete secret denies.

/plugin marketplace add \
  https://codeberg.org/automa-tan/permitlint.git
/plugin install permitlint@permitlint-tools