aspiers/allow-agent-commands
.agents/skills/allow-agent-commands/SKILL.md
Add or change allowed commands in AI agent permission configs (OpenCode, Claude Code)
$ install --global
skillsauthnpx skillsauth add aspiers/ai-config allow-agent-commandsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:50 PM1.8s1 file scanned
SKILL.md
- name:
- allow-agent-commands
- description:
- Add or change allowed commands in AI agent permission configs (OpenCode, Claude Code)
Adding/Changing Allowed Commands
When to use this skill
Use this skill when:
- A command needs to be added to the allow list for AI agents
- Permission settings need to be modified for existing commands
- Setting up a new AI tool that requires command permissions
How it works
Commands must be explicitly allowed in the permission configs before agents can run them. This skill covers adding entries to both OpenCode and Claude Code configuration files.
IMPORTANT: The config files are stowed into ~ via GNU Stow symlinks.
Always edit them directly from within the ai-config repository, NOT from ~.
The paths below are relative to the ai-config repository root.
OpenCode Configuration
File: .config/opencode/opencode.json under permission.bash
Format:
"uname *": "allow",
Pattern: "command argpatterns": "action" where * matches any args
Important: Insert new entries in alphabetical order by command name. When adding a new command, find the correct position to maintain sorting. Do NOT reorder existing entries.
Claude Code Configuration
File: .claude/settings.json under permissions.allow
Format:
"Bash(uname:*)",
Important: Insert new entries in alphabetical order. Commands are sorted
by the command name (the part after Bash( and before :).
Do NOT reorder existing entries.
General Pattern for New AI Tools
When adding new AI tools:
- Find their config file (usually in
~/.config/or project root) - Look for
permissions,allowedCommands, or similar sections - Add the command with glob patterns for arguments
- Insert new entries in alphabetical order by command name
- Do NOT reorder existing entries.
After Adding Commands
After adding the new command entries to both config files:
- Check if there are any other staged changes with
git status - If there are NO other staged changes, stage ONLY the new hunks in the two
config files using the
git-stagersubagent (be careful not to stage unrelated changes) - Invoke the
git-committersubagent to commit the changes
Examples
Adding rg (ripgrep) to both configs:
OpenCode (insert after rev *, before rpm -q*):
"rg *": "allow",
Claude Code (insert after Bash(rg:*), before Bash(rpm -q:*)):
"Bash(rg:*)",
Related Skills
aspiers/test-running
development
VerifiedTrustedCommunity
Run tests according to repository guidelines. Use after linting passes, before staging changes.
9SKILL.mdUpdated Apr 17, 2026
aspiers/task-orchestration
development
VerifiedTrustedCommunity
Orchestrate the complete development workflow for implementing sub-tasks from a task list. Use for end-to-end feature implementation with quality controls.
9SKILL.mdUpdated Apr 17, 2026
aspiers/task-implementation
development
VerifiedTrustedCommunity
Implement a single sub-task from a task list. Use when working on feature development with existing task lists.
9SKILL.mdUpdated Apr 17, 2026
aspiers/task-generation
data-ai
VerifiedTrustedCommunity
Generate a detailed task list from a PRP. Use after a PRP is created and ready for implementation planning.
9SKILL.mdUpdated Apr 17, 2026