# Agent Skill Permissions

> What 871 agent skills and plugins (Claude Code, Codex, GitHub Copilot, Anthropic and community catalogs) pre-approve and ship: shell and other allowed-tools, hooks, MCP servers, bundled scripts, network calls and credentials. Static scan of the source files at fixed commits, 2026-10-27. Signals are facts, not a safety rating; every finding links to its file and line.

Machine-readable data: https://permissions.branolabs.com/api/permissions.json
Per-item pages: https://permissions.branolabs.com/s/<catalog>/<slug>

## Signals
- Pre-approved shell (121 items): Its allowed-tools (or tools) list includes a shell tool such as Bash, so the agent may run commands without asking each time.
- Hooks (8 items): Ships hooks that run automatically on agent events (for example before a tool call or at session start).
- Local MCP server (16 items): Starts an MCP server process on your machine (command, npx/uvx package or Docker image).
- Remote MCP server (35 items): Connects to a hosted MCP server URL, so tool calls and their data go to that service.
- Bundled scripts (266 items): Contains code files (Python, shell, JavaScript…) that the agent can run.
- Network calls in code (66 items): At least one bundled code file contains an HTTP or socket call pattern (requests, fetch, curl…).
- Reads credentials (38 items): Code or MCP config references an environment variable that looks like a key, token or secret.
- Spawns processes (90 items): Bundled code starts other programs (subprocess, child_process, os.system, exec…).

## Catalogs
- Claude Code official plugins: 53 scanned, https://github.com/anthropics/claude-plugins-official at 41f619d61b999adec1a1c8deb97d1a5b6ac35bb6
- Anthropic Agent Skills: 19 scanned, https://github.com/anthropics/skills at dbd4588f9e1033efb41dad4bef2f7947c8993d44
- Codex official plugins: 62 scanned, https://github.com/openai/plugins at 0722921d5542fc593105c27bd52630babd8b8c2a
- Scientific Agent Skills (K-Dense): 177 scanned, https://github.com/K-Dense-AI/scientific-agent-skills at 5f2bc0341354fd5590aef76a533ada1e1e5b4e62
- Awesome Copilot skills (GitHub): 446 scanned, https://github.com/github/awesome-copilot at d75b41863510272ed217a3074c7045202b96e93f
- Awesome Copilot plugins (GitHub): 108 scanned, https://github.com/github/awesome-copilot at d75b41863510272ed217a3074c7045202b96e93f
- Claude community plugins (Anthropic): 6 scanned, https://github.com/anthropics/claude-plugins-community at 06ec7b6a0a82bdc4bec44bd82d4368c42f20d7c1

## Items with the most signals
- discord (claude-code): Shell (scoped); local MCP, scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/claude-code/discord
- telegram (claude-code): Shell (scoped); local MCP, scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/claude-code/telegram
- Creative Production (codex): Nothing pre-approved; local MCP, scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/codex/creative-production
- infographics (scientific-skills): Shell (any command); scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/scientific-skills/infographics
- latex-posters (scientific-skills): Shell (any command); scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/scientific-skills/latex-posters
- literature-review (scientific-skills): Shell (any command); scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/scientific-skills/literature-review
- NVIDIA (codex): Shell (any command); scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/codex/nvidia
- scientific-schematics (scientific-skills): Shell (any command); scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/scientific-skills/scientific-schematics
- scientific-slides (scientific-skills): Shell (any command); scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/scientific-skills/scientific-slides
- security-guidance (claude-code): Nothing pre-approved; hooks, scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/claude-code/security-guidance
- accessibility-kanban (copilot-plugins): Nothing pre-approved; scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/copilot-plugins/accessibility-kanban
- autoskill (scientific-skills): Shell (any command); scripts, network, credentials. https://permissions.branolabs.com/s/scientific-skills/autoskill
- citation-management (scientific-skills): Shell (any command); scripts, network, credentials. https://permissions.branolabs.com/s/scientific-skills/citation-management
- claude-security (claude-code): Shell (any command); hooks, scripts, subprocess. https://permissions.branolabs.com/s/claude-code/claude-security
- code-modernization (claude-code): Shell (any command); hooks, scripts, subprocess. https://permissions.branolabs.com/s/claude-code/code-modernization
- Data Analytics (codex): Nothing pre-approved; local MCP, scripts, network, subprocess. https://permissions.branolabs.com/s/codex/data-analytics
- generate-image (scientific-skills): Shell (any command); scripts, network, credentials. https://permissions.branolabs.com/s/scientific-skills/generate-image
- Higgsfield (codex): Nothing pre-approved; remote MCP, scripts, credentials, subprocess. https://permissions.branolabs.com/s/codex/higgsfield
- imessage (claude-code): Shell (scoped); local MCP, scripts, subprocess. https://permissions.branolabs.com/s/claude-code/imessage
- Life Science Research (codex): Nothing pre-approved; scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/codex/life-science-research
- OpenAI Developers (codex): Nothing pre-approved; local MCP, scripts, credentials, subprocess. https://permissions.branolabs.com/s/codex/openai-developers
- paper-lookup (scientific-skills): Shell (any command); scripts, network, credentials. https://permissions.branolabs.com/s/scientific-skills/paper-lookup
- pr-artifact-explorer (copilot-plugins): Nothing pre-approved; scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/copilot-plugins/pr-artifact-explorer
- pr-review (copilot-plugins): Nothing pre-approved; scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/copilot-plugins/pr-review
- release-notes-showcase (copilot-plugins): Nothing pre-approved; scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/copilot-plugins/release-notes-showcase
- research-lookup (scientific-skills): Nothing pre-approved; scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/scientific-skills/research-lookup
- Sentry (codex): Nothing pre-approved; remote MCP, scripts, network, credentials. https://permissions.branolabs.com/s/codex/sentry
- Shopify (codex): Nothing pre-approved; remote MCP, scripts, network, subprocess. https://permissions.branolabs.com/s/codex/shopify
- Superpowers (codex): Nothing pre-approved; scripts, network, credentials, subprocess. https://permissions.branolabs.com/s/codex/superpowers
- tres-finance-plugin (claude-community): Nothing pre-approved; remote MCP, scripts, network, credentials. https://permissions.branolabs.com/s/claude-community/tres-finance-plugin
- Build iOS Apps (codex): Nothing pre-approved; local MCP, scripts, subprocess. https://permissions.branolabs.com/s/codex/build-ios-apps
- chronicle-stats (copilot-plugins): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-plugins/chronicle-stats
- claude-api (anthropic-skills): Nothing pre-approved; scripts, network, credentials. https://permissions.branolabs.com/s/anthropic-skills/claude-api
- Codex Security (codex): Nothing pre-approved; local MCP, scripts, subprocess. https://permissions.branolabs.com/s/codex/codex-security
- deeptools (scientific-skills): Shell (any command); scripts, network. https://permissions.branolabs.com/s/scientific-skills/deeptools
- docx (anthropic-skills): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/anthropic-skills/docx
- draw (copilot-plugins): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-plugins/draw
- edit-tutorial (copilot-plugins): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-plugins/edit-tutorial
- fakechat (claude-code): Nothing pre-approved; local MCP, scripts, network. https://permissions.branolabs.com/s/claude-code/fakechat
- Figma (codex): Nothing pre-approved; hooks, remote MCP, scripts. https://permissions.branolabs.com/s/codex/figma
- foundry-agentic-loop (copilot-skills): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-skills/foundry-agentic-loop
- foundry-agentic-loop (copilot-plugins): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-plugins/foundry-agentic-loop
- genomic-coordinates (scientific-skills): Shell (any command); scripts, network. https://permissions.branolabs.com/s/scientific-skills/genomic-coordinates
- git-worktree-explorer (copilot-plugins): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-plugins/git-worktree-explorer
- github-security (copilot-plugins): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-plugins/github-security
- Google Drive (codex): Nothing pre-approved; remote MCP, scripts, subprocess. https://permissions.branolabs.com/s/codex/google-drive
- java-modernization-studio (copilot-plugins): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-plugins/java-modernization-studio
- Life Sciences NGS Analysis (codex): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/codex/ngs-analysis
- Mixpanel Headless (codex): Shell (any command); scripts, credentials. https://permissions.branolabs.com/s/codex/mixpanel-headless
- namecheap (copilot-skills): Nothing pre-approved; scripts, network, credentials. https://permissions.branolabs.com/s/copilot-skills/namecheap
- ncats-arax (scientific-skills): Shell (any command); scripts, network. https://permissions.branolabs.com/s/scientific-skills/ncats-arax
- ontology-term-resolution (scientific-skills): Shell (any command); scripts, network. https://permissions.branolabs.com/s/scientific-skills/ontology-term-resolution
- open-notebook (scientific-skills): Nothing pre-approved; scripts, network, credentials. https://permissions.branolabs.com/s/scientific-skills/open-notebook
- pathogen-variant-surveillance (scientific-skills): Shell (any command); scripts, network. https://permissions.branolabs.com/s/scientific-skills/pathogen-variant-surveillance
- pptx (anthropic-skills): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/anthropic-skills/pptx
- protocolsio-integration (scientific-skills): Shell (any command); scripts, network. https://permissions.branolabs.com/s/scientific-skills/protocolsio-integration
- pymatgen (scientific-skills): Shell (any command); scripts, credentials. https://permissions.branolabs.com/s/scientific-skills/pymatgen
- pysam (scientific-skills): Shell (any command); scripts, network. https://permissions.branolabs.com/s/scientific-skills/pysam
- ralph-loop (claude-code): Shell (scoped); hooks, scripts. https://permissions.branolabs.com/s/claude-code/ralph-loop
- repo-actions-hub (copilot-plugins): Nothing pre-approved; scripts, network, subprocess. https://permissions.branolabs.com/s/copilot-plugins/repo-actions-hub

## Pages
- [Methodology](https://permissions.branolabs.com/about)
- [Sources](https://permissions.branolabs.com/sources)

## Optional
- [Agent Skills Index](https://skills.branolabs.com): search and install skills and plugins
- [@BranoLabs on X](https://x.com/BranoLabs)
- [BranoLabs](https://branolabs.com): more small, data-backed AI tools