Skill(review) in permissions.deny does not block bundled /review skill

Bug Description

Adding "Skill(review)" to permissions.deny in settings.json does not prevent the bundled /review skill from being invoked.

Steps to Reproduce

1. Add the following to ~/.claude/settings.json:

{
  "permissions": {
    "deny": ["Skill(review)"]
  }
}

1. Start a new Claude Code session
2. Type /review
3. The /review skill still executes normally — it is not blocked

Expected Behavior

The bundled /review skill should be blocked and not execute when "Skill(review)" is in the permissions.deny list.

Actual Behavior

The /review skill executes as if the deny rule does not exist.

Environment

• Claude Code version: 1.0.56
• OS: macOS (Darwin 24.6.0)

Notes

• Other permission deny rules (e.g., Bash(...)) work as expected
• The permissions documentation suggests Skill(name) syntax should work for denying specific skills
• This appears to be a bug where the deny rule matching does not apply to bundled/built-in skills