What's wrong with this entry?
Anonymous. No account, no email.
What
A new disableSkillShellExecution policy/config setting that prevents inline shell execution in skills and custom slash commands from user, project, or plugin sources.
Usage: Set in your settings or policy configuration:
{
"disableSkillShellExecution": true
}Details
- When enabled, shell command blocks (`
!fenced blocks and!...inline syntax) in skills are replaced with[shell command execution disabled by policy]` - Applies to commands from user, project, or plugin sources — not policy settings
- Useful for organizations that want to allow skills but prevent arbitrary shell execution
Evidence
Policy gate and replacement logic (search for "disableSkillShellExecution" and "[shell command execution disabled by policy]")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.