allowed-tools
Claude CodeDefinition
A skill frontmatter field that whitelists which tools a skill can use during its execution. Enforces the principle of least privilege for skills. Use specific tool names or MCP server patterns (e.g., 'mcp__github__*' allows all GitHub MCP tools).
Example Usage
Set allowed-tools: [read_file, list_directory] for an analysis skill to prevent it from writing files even if asked.