diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc
index fd1a2d1..7225146 100644
--- a/.config/opencode/opencode.jsonc
+++ b/.config/opencode/opencode.jsonc
@@ -11,12 +11,16 @@
         "skill": "ask",
         "todowrite": "ask",
         "todoread": "ask",
-        "websearch": "ask",
+        "websearch": "ask"
     },
     "agent": {
         "plan": {
             "permission": {
-                "edit": "deny"
+                "edit": "deny",
+                "bash": {
+                    "*": "ask",
+                    "cat *>*": "deny"
+                }
             }
         }
     },