Skill and plugin-skill loaders now detect when a skill's frontmatter declares PreToolUse or PermissionRequest hooks outside the proper hooks object, and refuse to load that skill's hooks or allowed-tools rather than silently misapplying them.
Names in the bundleallowed-tools
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up allowed-tools, on Error reference.
* `Shell command permission check failed for pattern "..."`: the command's permission check didn't allow it. [Permission checks on injected commands](/docs/en/skills#permission-checks-on-injected-commands) covers which results abort in eac…errors see the edit
Added since
A small documentation edit on Fullscreen rendering touched a line naming allowed-tools after this was published.
* Rules you passed with [`--allowed-tools` or `--disallowed-tools`](/docs/en/cli-reference#cli-flags), and your `--agent`, `--agents`, `--append-system-prompt`, and `--system-prompt-snapshot` flagsfullscreen see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
A small documentation edit on Fullscreen rendering touched a line naming allowed-tools after this was published.