Before you open Claude Code in a cloned repo, check its .claude/skills folder
An analysis of 2,427 active public repositories found that 97.9% ship a project skill Claude Code can invoke on its own, and 22.3% include skills with `allowed-tools` that pre-approve commands without a permission prompt…