From 42ba4b475a8a2fb2d4aa333348850d8c5e1d5886 Mon Sep 17 00:00:00 2001 From: Mads Lorentzen Date: Sun, 30 Aug 2026 20:27:48 +0200 Subject: [PATCH] docs(changelog): record the bun-run permission narrowing (#396) Co-Authored-By: Claude Fable 5 --- CHANGELOG.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c893ee..cc08050 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -13,6 +13,17 @@ per-file diff commands. ## [Unreleased] +### Security + +- **`settings.json` no longer pre-approves `bun run` on arbitrary files** (#396) - the + template's permission allowlist granted `Bash(bun run:*)`, which auto-approved + `bun run ` in every fork. It is now one path-scoped entry per shipped + portal CLI, matching what each portal SKILL.md already declares. `/scrape` is unaffected + for all portals, including ones added by `/add-portal` - the job-scraper skill's own + `allowed-tools` carries the path-scoped wildcard that covers them during the workflow. + Running a portal CLI ad hoc outside a skill now prompts once, which is the intended + behavior for anything not on the reviewed list. Thanks @vkotaru. + ### Fixed - **`/scrape` now persists each posting's publication date** (#390) - Step 2's contract guarantees a