Add-ons · SetupTesting & SecurityReviewed

permissions/read-only-mode

Allows only reads, Glob and Grep, and denies edits, writes, shell commands and web fetches. Suited to review and audits.

View on GitHub

Kind: Setup
Works with: Claude Code
Languages: Shell
Source: Claude Code Templates @ 72e5f237f64d
Path: cli-tool/components/settings/permissions/read-only-mode.json
License: MIT
Jobs: Review, Guardrails

InstallInstall it by hand, following the source.

{
  "description": "Restrict Claude to read-only operations for code review and analysis. Prevents any file modifications or command executions, making it safe for exploring unfamiliar codebases or conducting security audits.",
  "permissions": {
    "allow": [
      "Read(**/*)",
      "Glob",
      "Grep"
    ],
    "deny": [
      "Edit",
      "Write",
      "MultiEdit",
      "Bash",
      "WebFetch"
    ]
  }
}