Skip to content

bug: permission.skill pattern rules are not fully enforced in skill exposure flow #21793

@membphis

Description

@membphis

Description

When permission.skill uses a pattern rule like \"lark-*\": \"deny\", matching skills are still exposed to the model.

I expected Lark skills such as lark-doc, lark-base, and lark-mail to be unavailable, but they still appear in the available skills list.

Plugins

opencode

OpenCode version

1.4.1

Steps to reproduce

  1. Add this global config:
{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "skill": {
      "lark-*": "deny"
    }
  }
}
  1. Start opencode
  2. Open a normal session where skills are included in the prompt/tool descriptions
  3. Inspect the available skills shown to the model

Expected behavior

Skills matching lark-* should not be exposed to the model.

Actual behavior

Skills matching lark-* still appear in the available skills list.

Screenshot and/or share link

No response

Operating System

ubuntu 24, arm64

Terminal

Ghostty

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingcoreAnything pertaining to core functionality of the application (opencode server stuff)

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions