---
title: "block-wildcard-agent-permissions"
description: "Pre-commit gate for the mechanizable slice of excessive agency: committed agent permission grants that allow everything. A settings file whose shell grant or allow-list is a bare wildcard hands the agent unlimited tool a"
canonical: https://agentpluginsdirectory.com/plugins/block-wildcard-agent-permissions--open-coder-ai-org
last-updated: 2026-09-08
---

# block-wildcard-agent-permissions
Pre-commit gate for the mechanizable slice of excessive agency: committed agent permission grants that allow everything. A settings file whose shell grant or allow-list is a bare wildcard hands the agent unlimited tool authority for every future session, in a file reviewers rarely read as code. The agent-world twin of block-wildcard-iam: scope grants to what the task needs (e.g. Bash(git status:*)). Escape: 'pragma: allowlist broad-agency' on the same line.
- Slug: block-wildcard-agent-permissions--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock
- Manifest: .agents/policies/block-wildcard-agent-permissions/plugin.json
- Version: 0.0.1
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (block-wildcard-agent-permissions)
- MCP servers: 0
- Stars: 3
- Listing: https://agentpluginsdirectory.com/plugins/block-wildcard-agent-permissions--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json