claude-code - 💡(How to fix) Fix disallowedTools and allowedTools not enforced for plugin-installed agents [1 participants]

mkdir -p /tmp/disallowed-test/.claude/agents
cd /tmp/disallowed-test
git init
echo "# Test" > README.md

---

mkdir -p .claude
cat > .claude/settings.json << 'EOF'
{
  "permissions": {
    "allow": [
      "Read", "Edit", "Write", "Glob", "Grep",
      "Bash(find *)", "Bash(grep *)", "Bash(cat *)", "Bash(ls *)"
    ]
  }
}
EOF

---

cat > .claude/agents/local-test.md << 'EOF'
---
name: local-test
description: Test agent with restricted tools
tools: Read, Agent
allowedTools:
  - Read
  - Agent
disallowedTools:
  - Bash(find *)
  - Bash(grep *)
  - Bash(cat *)
  - Bash(ls *)
  - Edit
  - Write
  - Glob
  - Grep
  - EnterPlanMode
  - ExitPlanMode
---

Try these commands directly (do NOT spawn subagents):
1. Run `find . -name "*.md"` via Bash
2. Run `ls .` via Bash
3. Enter plan mode

Report which ones were blocked.
EOF

---

mkdir -p /tmp/test-plugin/.claude-plugin /tmp/test-plugin/agents
cat > /tmp/test-plugin/.claude-plugin/plugin.json << 'EOF'
{
  "name": "test-restricted",
  "description": "Test plugin"
}
EOF

cat > /tmp/test-plugin/.claude-plugin/marketplace.json << 'EOF'
{
  "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
  "name": "test-restricted",
  "description": "Test plugin",
  "owner": { "name": "test" },
  "plugins": [{ "name": "test-restricted", "source": "./", "category": "productivity" }]
}
EOF

# Same agent definition, different name
cat > /tmp/test-plugin/agents/plugin-test.md << 'EOF'
---
name: plugin-test
description: Test agent with restricted tools
tools: Read, Agent
allowedTools:
  - Read
  - Agent
disallowedTools:
  - Bash(find *)
  - Bash(grep *)
  - Bash(cat *)
  - Bash(ls *)
  - Edit
  - Write
  - Glob
  - Grep
  - EnterPlanMode
  - ExitPlanMode
---

Try these commands directly (do NOT spawn subagents):
1. Run `find . -name "*.md"` via Bash
2. Run `ls .` via Bash
3. Enter plan mode

Report which ones were blocked.
EOF

cd /tmp/test-plugin && git init && git add -A && git commit -m "init"

---

claude plugin marketplace add /tmp/test-plugin
claude plugin install test-restricted

---

cd /tmp/disallowed-test

# Test 1: local agent
claude --agent local-test "Try all 3 commands directly and report which were blocked."

# Test 2: plugin agent
claude --agent plugin-test "Try all 3 commands directly and report which were blocked."