PR #24946: feat(plan): require user confirmation for activate_skill in Plan Mode

• Repository: google-gemini/gemini-cli
• Author: ruomengz
• State: closed | merged: True
• Link: https://github.com/google-gemini/gemini-cli/pull/24946

Description (problem / solution / changelog)

Summary

Hardens the Plan Mode policy by requiring explicit user confirmation before activating a skill.

Details

Previously, activate_skill was explicitly allowed in Plan Mode. This PR removes that rule and includes activate_skill in the ask_user group for Plan Mode. This ensures that even though skills are generally safe, the user is notified and must confirm when a skill is being activated during the planning phase, as it may introduce new instructions or capabilities.

Related Issues

https://github.com/google-gemini/gemini-cli/issues/24942

How to Validate

1. Enter Plan Mode: enter_plan_mode
2. Try to activate a skill, for example: activate_skill(name='test-expert')
3. Verify that the CLI asks for confirmation instead of automatically activating the skill.

Pre-Merge Checklist

• Updated relevant documentation and README (if needed)
• Added/updated tests (if needed)
• Noted breaking changes (if any)
• Validated on required platforms/methods:
  • MacOS
    • npm run
    • npx
    • Docker
    • Podman
    • Seatbelt

Changed files

• packages/core/src/policy/policies/plan.toml (modified, +2/-9)