dangerously-skip-permissions blocks read-only file copy from ~/.claude/skills/ into workspace

Description

When running Claude Code with --dangerously-skip-permissions, reading files from ~/.claude/skills/ and writing them into the current workspace triggers an approval prompt. This blocks skill-based workflows that rely on template files.

Reproduction

1. Install skill template files in ~/.claude/skills/my-skill/ (e.g. template.md)
2. Run Claude Code with --dangerously-skip-permissions
3. Ask Claude to copy a template into the current workspace:

``
cp ~/.claude/skills/my-skill/template.md ./CLAUDE.md
``

1. An approval prompt appears, blocking the operation

Why this matters

Skills are designed around template files — plan templates, instruction files, checklists — that get copied into the workspace during normal use. Every copy triggers an approval prompt, making --dangerously-skip-permissions ineffective for skill-based workflows.

The operation is a read from a user-owned path followed by a write into the workspace. Data flows into the sandbox, not out of it. This should not require approval.

Expected behavior

Auto-approved. Reading from ~/.claude/skills/ and writing into the workspace is safe by definition.

Actual behavior

Approval prompt blocks the operation every time.

Environment

• Claude Code v2.1.89
• Windows 11
• This was not happening in v2.1.81 — started after recent security hardening updates