Claude Code skill allowed-tools: a one-turn grant, not a sandbox

You add allowed-tools: Bash(git add *) Bash(git commit *) to a skill. You type /commit, and Claude...