Protected .claude/ paths with --dangerously-skip-permissions

When --dangerously-skip-permissions is active, writes to .claude/skills/, .claude/agents/, and .claude/commands/ are still allowed without prompting.

bash

# Even with permissions bypassed, Claude can write to these paths:
#   .claude/skills/     — custom skills
#   .claude/agents/     — subagent definitions
#   .claude/commands/   — custom slash commands
#
# This ensures automated CI/CD runs can still generate
# or update project-scoped configuration files.
claude -p "create a release-check skill" --dangerously-skip-permissions