mirror of
https://github.com/MadsLorentzen/ai-job-search.git
synced 2026-11-02 13:12:50 +00:00
MaverickHQandClaude Opus 5.5
bc2c583c44
settings.json pre-approves verify_pdf.py with any arguments, and --dump-text wrote the PDF's text layer to any path it was given, creating missing parent directories and overwriting existing files. Reproduced on master through the real CLI: a one-page PDF's text was written to a new directory outside the repo with no prompt. The CLI now writes only a .txt under the repo's cv/ or cover_letters/ (where apply.md Step 5d puts it) and refuses a symlinked target. Bash(pdftotext:*) is dropped for the same reason: Poppler writes to any output path, and `pdftotext <file> -` prints any PDF on disk into the session. verify_pdf.py already wraps it; the documented manual fallback still works and now asks first. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
71 lines
2.3 KiB
JSON
71 lines
2.3 KiB
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Skill(job-application-assistant)",
|
|
"Bash(bun run .agents/skills/jobbank-search/cli/src/cli.ts:*)",
|
|
"Bash(bun run .agents/skills/jobdanmark-search/cli/src/cli.ts:*)",
|
|
"Bash(bun run .agents/skills/jobindex-search/cli/src/cli.ts:*)",
|
|
"Bash(bun run .agents/skills/jobnet-search/cli/src/cli.ts:*)",
|
|
"Bash(bun run .agents/skills/linkedin-search/cli/src/cli.ts:*)",
|
|
"Bash(bun run .agents/skills/freehire-search/cli/src/cli.ts:*)",
|
|
"Bash(python salary_lookup.py:*)",
|
|
"Bash(python3 salary_lookup.py:*)",
|
|
"Bash(python tools/rank_state.py:*)",
|
|
"Bash(python3 tools/rank_state.py:*)",
|
|
"Bash(python tools/job_key.py:*)",
|
|
"Bash(python3 tools/job_key.py:*)",
|
|
"Bash(python tools/scrape_state.py:*)",
|
|
"Bash(python3 tools/scrape_state.py:*)",
|
|
"Bash(python tools/verify_pdf.py:*)",
|
|
"Bash(python3 tools/verify_pdf.py:*)",
|
|
"Bash(python tools/verify_layout.py:*)",
|
|
"Bash(python3 tools/verify_layout.py:*)",
|
|
"Bash(python tools/robots_check.py:*)",
|
|
"Bash(python3 tools/robots_check.py:*)",
|
|
"Bash(python tools/fetch_page.py:*)",
|
|
"Bash(python3 tools/fetch_page.py:*)",
|
|
"Bash(python tools/posting_guard.py:*)",
|
|
"Bash(python3 tools/posting_guard.py:*)"
|
|
],
|
|
"ask": [
|
|
"Edit(.claude/settings.json)",
|
|
"Edit(.claude/settings.local.json)",
|
|
"Edit(.claude/skills/*/SKILL.md)",
|
|
"Edit(.claude/commands/*.md)",
|
|
"Edit(.claude/agents/**)",
|
|
"Edit(.github/**)",
|
|
"Edit(tools/security_guards.py)",
|
|
"Edit(tools/**)",
|
|
"Edit(.agents/**)",
|
|
"Edit(salary_lookup.py)",
|
|
"Bash(git push:*)"
|
|
],
|
|
"deny": [
|
|
"Read(.env)",
|
|
"Read(.env.*)",
|
|
"Read(~/.ssh/**)",
|
|
"Read(~/.aws/**)",
|
|
"Read(~/.gnupg/**)",
|
|
"Bash(curl -d:*)",
|
|
"Bash(curl --data:*)",
|
|
"Bash(curl -F:*)",
|
|
"Bash(curl --form:*)",
|
|
"Bash(curl -T:*)",
|
|
"Bash(curl --upload-file:*)",
|
|
"Bash(curl -X POST:*)",
|
|
"Bash(curl -X PUT:*)",
|
|
"Bash(curl -XPOST:*)",
|
|
"Bash(curl --request POST:*)",
|
|
"Bash(wget --post-data:*)",
|
|
"Bash(wget --post-file:*)",
|
|
"Bash(wget --method=POST:*)",
|
|
"Bash(scp:*)",
|
|
"Bash(sftp:*)",
|
|
"Bash(ssh:*)",
|
|
"Bash(nc:*)",
|
|
"Bash(ncat:*)",
|
|
"Bash(netcat:*)"
|
|
]
|
|
}
|
|
}
|