Secure Opencode Permissions

This skill manages opencode's permission settings. It reviews and summarizes currently always-allowed commands, suggests safe read-only commands for auto-approval, adds or removes entries from the allow list in opencode.json, configures skill-level permissions (allow/deny/ask) with wildcard patterns, and audits permission configs for security and usability. The workflow reads the current config from ~/.config/opencode/opencode.json or a project-level opencode.json, summarizes allowed commands and skill permissions, proposes safe read-only additions, applies the requested changes, and validates that the resulting JSON is still valid.

Use it when optimizing opencode's permission settings, reviewing which commands are currently allowed, or configuring skill-level access controls. Key rules bound its scope: never allow commands that modify files, commit, push, or change system state; prefer exact command entries (git status --short, git diff --stat, ls -la) over trailing wildcards like git status* unless the expanded family has been manually reviewed as read-only; and always confirm with the user before modifying the permission config. It is scoped strictly to opencode's own permission configuration and should not modify another agent host's permission store.

Input is the existing opencode.json permission config plus a request (review, suggest, add, remove, or audit). Output is a summary of current permissions, a set of suggested safe additions, or an edited, validated config file. It distinguishes bash command permissions from skill permissions and keeps related commands grouped in the config. Every write-capable command permission is treated as high-risk and reviewed manually even when its pattern looks narrow.

opencode users and maintainers who want their command allow-list kept safe and organized rather than accumulating overly broad wildcard permissions over time. Triggered via the permission-manager subagent, the /permissions command, or natural-language requests to "manage opencode permissions." MIT licensed.