"ulysses 31" -- As — indicates, the plugins you include in your app determine the permissions that are shown when the app is installed. The standard Cordova build will usually include the "network" permission, and a few older versions of Crosswalk included two or three others.
If you are building with CLI 6.2.0 and a recent version of Crosswalk and are seeing a lot of permissions, this is due to the Cordova plugins you've included with your app.
Attempting to remove the permissions from your app, without removing the plugins that require them, will result in problems when your app runs. Those plugins require those permissions because they use Android APIs that require those permissions. If you remove the permissions those API calls will fail when your app runs.
The best way to control the permissions is to evaluate the plugins you are using and determine which are adding permissions you do not want in your app and see if there is an alternative that might require fewer permissions. For example, if you are using a plugin that implements multiple functions, but you only need one of those functions, you might be able to find a plugin that implements only that single function, in exchange for fewer permission requirements.