Bash tool calls not in allowlist executed without authorization prompt

Description

During a session, Bash tool calls for commands not present in the settings.json allowlist executed without triggering the authorization prompt. The user was not prompted to approve or deny the tool calls — they simply ran.

Commands that ran without prompting

• git add
• git commit
• git push

Settings

The allowlist contained only git diff, git log, and git status for git commands. No broad allow rules (e.g. Bash(*)). No hooks configured. --dangerously-skip-permissions was not used.

Expected behavior

An authorization prompt should appear for any Bash command not matched by an allowlist rule, allowing the user to approve or deny before execution.

Actual behavior

The commands executed silently without any prompt.

Platform

macOS

Version

2.1.118

Notes

The session was running a skill, though it's unclear whether that's relevant — skill invocation shouldn't affect the authorization layer.