[BUG] Claude Code Violates Settings

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Environment

• Claude Code version: 2.1.233
• OS: macOS (Darwin 25.5.0)
• Config scope: global ~/.claude/settings.json

Suggested fix

Either have skill-forked executions respect existing Task/Agent deny rules, or document an explicit rule to block background
skill execution globally.

What Should Happen?

Honor the settings

Error Messages/Logs

Steps to Reproduce

1. Set global ~/.claude/settings.json with the following, to block all background/subagent execution:

{
"permissions": {
"defaultMode": "default",
"deny": ["Task", "Agent", "mcp__*"]
}
}

1. Start a Claude Code session in any project.
2. Ask Claude to review the project's changes (e.g. "review all changes in this project").
3. Claude invokes the code-review skill, which launches as a forked background execution rather than running inline.
4. Run ListAgents — the code-review agent is shown as running in the background, despite Task and Agent being denied in global

settings.

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.233

Platform

Other

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_