Claude Code skill allowed-tools: a one-turn grant, not a sandbox

You add allowed-tools: Bash(git add *) Bash(git commit *) to a skill. You type /commit, and Claude stages and commits without asking. You send one more message, ask for another commit — and the permis