Skip to content

feat: Add spec for skill-based bash permissions#8

Open
buger wants to merge 3 commits intomasterfrom
feat/skill-based-bash-permissions
Open

feat: Add spec for skill-based bash permissions#8
buger wants to merge 3 commits intomasterfrom
feat/skill-based-bash-permissions

Conversation

@buger
Copy link
Copy Markdown
Contributor

@buger buger commented Feb 12, 2026

Summary

  • Adds allowed_commands to skills that need bash access:
    • github: gh *
    • github-actions: gh *
    • engineer: git *, npm *, npx *, ls -F
    • assistant-debugging: curl *, jq *
  • These commands are aggregated by visor-ee's build-config step and passed to visor via ai_bash_config_js for dynamic bash permission enforcement

Related PRs

Test plan

  • Verify skills.yaml is valid YAML
  • Verify commands match what each skill actually needs
  • End-to-end: active skills grant appropriate bash permissions in assistant responses

🤖 Generated with Claude Code

Introduces a specification for extending the skill definition schema
with per-skill allowed_commands and disallowed_commands fields, enabling
fine-grained bash command permissions per skill.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
buger and others added 2 commits February 12, 2026 20:06
Add skill-specific bash command permissions:
- github, github-actions, find_external_contributions: gh *
- engineer: git, npm, npx, cargo, go, make, docker, gh, ls

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant