Repository navigation
Permissions for skill not working as expected #29727
Description
Description
Hey team,
I generated below config for my usecase. The expectation here is that only the allowed skills should be visible. But, i see all skills when i open opencode with just this opencode.json.
{
"model": "opencode/deepseek-v4-flash-free",
"mcp": {
"github": {
"type": "local",
"command": [
"npx",
"-y",
"@modelcontextprotocol/server-github"
],
"env": {
"GITHUB_TOKEN": "env:GITHUB_TOKEN"
}
}
},
"instructions": [],
"permission": {
"skill": {
"*": "deny",
"caveman": "allow",
"grill-me": "allow",
"tdd": "allow"
}
}
}
Opencode is starting as below:
export OPENCODE_CONFIG=/path/to/above/opencode.json
opencode
I see other skills installed in /skills command showing up.
skills_available
Plugins
No response
OpenCode version
1.15.11
Steps to reproduce
- Run opencode with the above config.
Screenshot and/or share link
No response
Operating System
Ubuntu 26.04
Terminal
terminal
Metadata
Metadata
Assignees
Labels
No labels
Activity
github-actions commentedon May 28, 2026
This issue might be a duplicate of existing issues. Please check:
permission.skilldeny rules not enforced, skills still appear in the available list despite being set todenyOpeOginni commentedon May 28, 2026
@kapilratnani I feel like its alright for them to show in the list, lets say you want to force them in, but at least they are enforced
kapilratnani commentedon May 29, 2026
The documentation is misleading then. The skills are visible with
/skillscommand and they get triggered as well. i Just tried.kapilratnani commentedon Jun 4, 2026
Closing the issue as per discussion here #29738
kapilratnani commentedon Jun 4, 2026
@drozd-ua thanks. Discussed with @OpeOginni in the other thread. We are good. Closing this.