Claude Code skill allowed-tools: a one-turn grant, not a sandbox
Anthropic's Claude Code skill system grants `allowed-tools` permissions only for the turn that invokes the skill, not for the entire session, which can confuse users expecting a persistent whitelist. The field pre-approv…