tengu_prompt_shell_permission
A Claude Code feature flag, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
Inline shell commands in a skill's instructions can now be handed to the model to run explicitly instead of executing silently
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.271.
In the changelogs
2Releases whose published page names tengu_prompt_shell_permission.
-
v2.1.271
Skill inline shell commands can be handed off to the model instead of auto-run
Inline shell commands in a skill's instructions can now be handed to the model to run explicitly instead of executing silently
gate cited by this entry
-
v2.1.271
New telemetry event for prompt-shell permission handling
New tengu_prompt_shell_permission telemetry event logs how inline skill shell commands are permission-checked
gate cited by this entry, found in this entry's text
Gate readings
0No release here has a gate table behind it for this flag. Most published releases have none at all: the readings exist only for versions the pipeline captured flag state on.
First cited
1The earliest release whose published evidence quoted tengu_prompt_shell_permission was v2.1.271, 14 Sep 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the feature flag does. All feature flags.