Claude Code's allowed-tools Field Doesn't Restrict Tool Access. An Open Bug Also Lets a SKILL.md Documentation Example Run for Real (2026)
A skill declaring 5 tools in allowed-tools can receive 46+, undeclared write access included. A separate open bug means fenced code blocks documenting the ! syntax execute for real. What v2.1.271 changed, and how to actually contain a skill.






































































































































































































