What is bash-smart-approve:list?

A command that displays the effective bash-smart-approve settings after combining built-in, user, and project rules.

Use it to review allowed commands, website domains, removable paths, denied patterns, scope, the kill switch, and recent activity.

It gives you one view of what is allowed, blocked, enabled, and logged, even when settings are spread across several files.

bash-smart-approve:list — Skill for Claude Code and Codex by pr3m: A command that displays the effective bash-smart-approve settings after…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add skills/pr3m/claude-code-bash-smart-approve/list

Any agent

npx skills add pr3m/claude-code-bash-smart-approve --skill list

Clone the repo

git clone --depth 1 https://github.com/pr3m/claude-code-bash-smart-approve

Made for: Claude Code, Codex.

Or install bash-smart-approve, the plugin that ships this one along with the rest of its 9 skills, 1 hook.

Per session 49 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 481 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00049	$0.00481
Opus 5	$0.00024	$0.00241
Sonnet 5	$0.00010	$0.00096
Haiku 4.5	$0.00005	$0.00048

Measured 3d ago against content hash 78c14380ddee, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

bash-smart-approve:list scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

Allowed curl domains:

plugins/bash-smart-approve/skills/list/SKILL.md · 61 lines

What it actually says

List Config

Display the effective bash-smart-approve configuration.

Step 1 — Load config

Read and merge (later overrides earlier for scalars; arrays union):

Plugin defaults (from hooks/approve.js DEFAULT_CONFIG)
User config: $CLAUDE_PLUGIN_DATA/config.json OR ~/.claude/bash-smart-approve.json
Project config: <cwd>/.claude/bash-smart-approve.json

Also check BASH_SMART_APPROVE_DISABLE env var.

Step 2 — Render

Show a readable grouped summary:

bash-smart-approve — effective config

Status:       enabled (kill-switch off)
Scope:        everywhere  (or: <list of scopeDirectories>)
Config files: ~/.claude/bash-smart-approve.json
              /Users/.../project/.claude/bash-smart-approve.json

Allowed binaries (from defaults + user + project):
  defaults:  ls, cat, grep, sed, awk, jq, git, node, npm, ...
  + user:    aws-vault, jira, wunda-deploy
  + project: wunda-ecs

Allowed curl domains:
  *.atlassian.net, api.github.com

Allowed rm paths:
  /tmp/**

Denied patterns:
  (none)

Log file:  ~/.claude/bash-smart-approve.log  (last modified: 5 min ago)
Log decisions: allow, ask

Step 3 — Hint

At the bottom, point the user at:

/bash-smart-approve:allow <cmd> to add
/bash-smart-approve:remove <item> to remove
/bash-smart-approve:status for health check
/bash-smart-approve:review-log for recent activity

Notes

Distinguish defaults from user additions in the output — helps users see what they've customized.
If no config file exists, show defaults only and note: "No user config yet. Run /bash-smart-approve:install to create one."

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

3d ago First seen · 61 lines · 49 tokens per session scan A 78c14380ddee

Subscribe to this mod's changes

bash-smart-approve:list is a skill published in the GitHub repository pr3m/claude-code-bash-smart-approve (1 stars, last pushed 4mo ago), licensed MIT. It adds 49 tokens to every session and 481 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

allowlist bash claude-code claude-code-hook claude-code-plugin

x-mankier

Search and browse man pages from ManKier.com. Command line interface for ManKier man page repository. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.

x-cmd/x-cmd · 62 tokens

x-osv

CLI for Google OSV database. Query vulnerabilities for packages, scan local projects for vulnerable dependencies. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill). Required Tool: Install osv-scanner for project scanning (see https://github.com/google/osv-scanner).

x-cmd/x-cmd · 72 tokens

rule

Skill "rule" from x-cmd/x-cmd, covering rule — rules to rule, 核心命令, 规则文件格式, 示例 and 验证规则文件格式.

x-cmd/x-cmd · 0 tokens

wikipedia

Search and read Wikipedia via x wkp — MediaWiki API, no API key, zero install; query, extract, suggest, and DDG route in one module. Load for wiki, wikipedia, encyclopedia lookup, article summary.

x-cmd/x-cmd · 49 tokens

cve

Look up CVE records via x cve — cached, zero-API-key, daily xz TSV. Load for cve, vulnerability id, kev, epss, nvd, cvelist, or security advisory.