What
A new disableSkillShellExecution policy/config setting that prevents inline shell execution in skills and custom slash commands from user, project, or plugin sources.
Usage: Set in your settings or policy configuration:
{
"disableSkillShellExecution": true
}Details
- When enabled, shell command blocks (`
!fenced blocks and!...inline syntax) in skills are replaced with[shell command execution disabled by policy]` - Applies to commands from user, project, or plugin sources — not policy settings
- Useful for organizations that want to allow skills but prevent arbitrary shell execution
Evidence
Policy gate and replacement logic (search for "disableSkillShellExecution" and "[shell command execution disabled by policy]")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
One source agreesOne thing we can check says the same as this entry.
Anthropic's release notes agree
Added disableSkillShellExecution setting to disable inline shell execution in skills, custom slash commands, and plugin commands