fix(opencode): update skill handling in context and permissions - #29738

I think this fix is needed. In the current version the permission.skill just doesn't work. I can see the denied skills as well as they can be triggered.

I am working on building this project https://github.com/kapilratnani/aienv to create isolated and task specific AI environments. With claude-code i am able to restrict the skills and mcp to the one selected while with OpenCode only mcp works.

If permissions is not the way what should we do ?

@kapilratnani Saw your other comment on the other issue.

I think the /skills command doesnt let the Agent load the skills on its own, it adds thw whole skill to the context, im thining that is more of a manual/deliberate action from the user forcing the skill text in the context.

But in the case of the agent "loading" the skill that seems to still work, if it doesnt for you lease share your config and maybe an example of the skill you are trying to deny and I can check it out and try to repod on my end

i am using this config

{
  "$schema": "https://opencode.ai/config.json",
  "model": "claude-sonnet-4-5",
  "mcp": {
    "docker": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@docker/mcp-server"
      ]
    },
    "github": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@modelcontextprotocol/server-github"
      ],
      "env": {
        "GITHUB_TOKEN": "env:GITHUB_TOKEN"
      }
    },
    "postgres": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@modelcontextprotocol/server-postgres",
        "postgresql://localhost/mydb"
      ]
    }
  },
  "instructions": [
  ],
  "permission": {
    "skill": {
      "*": "deny",
      "tdd": "allow",
      "vercel-react-best-practices": "allow"
    }
  }
}

I tried to trigger a grill-me skill which is installed globally.
Prompt : "start a grill me session" - did not trigger
Prompt : "/grill-me on this project" - Trigger.

Then i modified the config to allow the grill-me skill:

  "permission": {
    "skill": {
      "*": "deny",
     "grill-me": "allow", 
     "tdd": "allow",
      "vercel-react-best-practices": "allow"
    }
  }

Prompt : "start a grill me session" - skill loaded.

@kapilratnani This is what i get from you

• Prompt : "start a grill me session" - did not trigger: This means the deny worked
• Prompt : "/grill-me on this project" - Trigger: This is because when using /skill and specifing the skll exactly it adds the whole md into context, the model doesnt "load" it beacuse you already added it to the prompt, so like i said before its you manually forcing the skill in the context.

Second Case

• Prompt : "start a grill me session" - skill loaded.: The skill loaded normally since its allowed now.

Hope you understand now. So there isnt any issue with the permissions.