macos-permissions
An agent skill by daymade, from daymade/claude-code-skills. Tags: access-control, debugging, macos, security, troubleshooting.
What it does
Diagnose and fix macOS TCC permission dialogs and silent denials — Screen Recording, Microphone, Camera, Accessibility, Automation (Apple Events), Full Disk Access, Files & Folders, and the "X would like to access data from other apps" prompt. Use whenever an app or background job is blocked by a macOS privacy permission, a permission dialog reappears after clicking Allow, a LaunchAgent/`uv run` job keeps prompting, System Settings shows a bare version number or wrong name, a granted permission silently stops working after an update, or you need to find WHO is really requesting a permission. Covers reading TCC.db as the ground-truth source, attribution (display name ≠ responsible process), per-binary-path grants, the `uv`-in-launchd Full-Disk-Access trap, `tccutil reset`, and SIP limits. 中文触发：权限弹窗、授权、TCC、完全磁盘访问、Full Disk Access、录屏/麦克风/摄像头/辅助功能/自动化权限被拒、访问其他应用的数据、弹窗一直弹、授权了没用、升级后失效、System Settings 里显示版本号。
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add daymade/claude-code-skills --skill macos-permissionsOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/daymade/claude-code-skills
cp -r claude-code-skills/daymade-macos/macos-permissions ~/.claude/skills/macos-permissionsSafety box score
Not rated yet. A safety box score grades what a skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. Anyone can request one from this page; it is saved for everyone. How the score works.
Source
- Repository
- daymade/claude-code-skills (all skills from this repository)
- Path
- daymade-macos/macos-permissions/SKILL.md
- Branch
- main
- Updated
- 2026-09-20
Related skills
- tunnel-doctor — Diagnoses concrete tunnel and proxy-path failures across macOS and Windows/WSL: Tailscale routing, proxy env/system bypass, SSH double tunneling.
- address-sanitizer — Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during fuzzing or tests.
- agents-debug — Use when your agent or environment is broken — wrong answers, errors, timeouts, tool failures, or CLI issues. Reads traces and logs to diagnose root causes.
- agents-harden — Use when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle.
- app-platform-troubleshooting — Debug running App Platform applications by accessing containers, analyzing logs, running diagnostics, and applying fixes.
- audit-context-building — Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere.