diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index ec3d79a..0a62f42 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -20,10 +20,9 @@ jobs:
     
     runs-on: ubuntu-latest
     permissions:
-      contents: write
-      pull-requests: write
-      issues: write
-      actions: read
+      contents: read
+      pull-requests: read
+      issues: read
       id-token: write
     
     steps:
@@ -38,25 +37,18 @@ jobs:
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           prompt: |
-            ��������SharpPad��Ŀ��Pull Request������һ������ASP.NET Core 9.0��C#���ߴ���༭����
-            �ص��ע��
-            1. Roslyn���ɺʹ���������ܵ�����
-            2. Monaco Editor����ʵ��
-            3. NuGet������ϵͳ�İ�ȫ�Ժ�����
-            4. API��ƺ�RESTful���ʵ��
-            5. �����Avalonia���ɵ��ȶ���
-            6. ����������DZ��bug�Ͱ�ȫ©��
-            7. �����Ż�����
-            8. ���Ը����ʺʹ���һ����
+            Please review this pull request and provide feedback on:
+            - Code quality and best practices
+            - Potential bugs or issues
+            - Performance considerations
+            - Security concerns
+            - Test coverage
+            
+            Use the repository's CLAUDE.md for guidance on style and conventions. Be constructive and helpful in your feedback.
 
-            �ο���Ŀ��Ŀ¼��CLAUDE.md�˽����淶�����ṩ�����Եķ������顣
-            ʹ��`gh pr comment`���������������PR�����С�
+            Use `gh pr comment` with your Bash tool to leave your review as a comment on the PR.
           
           # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
-          # or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options
-          claude_args: |
-            --model claude-opus-4-1-20250805
-            --max-turns 50
-            --dangerously-skip-permissions
-            --allowed-tools *
+          # or https://docs.claude.com/en/docs/claude-code/sdk#command-line for available options
+          claude_args: '--allowed-tools "Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"'
 
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 9f21375..b1a3201 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -19,9 +19,9 @@ jobs:
       (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
     runs-on: ubuntu-latest
     permissions:
-      contents: write
-      pull-requests: write
-      issues: write
+      contents: read
+      pull-requests: read
+      issues: read
       id-token: write
       actions: read # Required for Claude to read CI results on PRs
     steps:
@@ -45,10 +45,6 @@ jobs:
 
           # Optional: Add claude_args to customize behavior and configuration
           # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
-          # or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options
-          claude_args: |
-            --model claude-opus-4-1-20250805
-            --max-turns 50
-            --dangerously-skip-permissions
-            --allowed-tools *
+          # or https://docs.claude.com/en/docs/claude-code/sdk#command-line for available options
+          # claude_args: '--model claude-opus-4-1-20250805 --allowed-tools Bash(gh pr:*)'