deny

Add deny rules to clash policy with dry-run previews and confirmation.

33|5|Updated Jan 27, 2026
One-click install
npx skills add https://github.com/empathic/clash --skill deny
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: deny
Source: https://github.com/empathic/clash/tree/main/clash-plugin/skills/deny
Command: npx skills add https://github.com/empathic/clash --skill deny

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Block risky actions by adding a deny rule to the clash policy, ensuring denials take precedence over allows or prompts.

Core Features & Use Cases

  • Dry-run previews to verify the rule before applying
  • Clear confirmation of the exact rule and target profile
  • Immediate enforcement of policy changes via the clash CLI, with safety rails

Quick Start

Ask Clash to add a deny rule to block a specific command, then confirm and apply.

Frequently Asked Questions about deny

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I block risky commands using a clash policy?

To block risky commands using a clash policy, you add a deny rule that takes precedence over allows or prompts. This ensures specific tool invocations are blocked safely across profiles and scenarios.

Can I preview a deny rule before applying it to my policy?

Yes, you can preview a deny rule before applying it to your policy using the dry-run feature. This allows you to verify the exact rule and target profile before enforcing any changes.

Does a deny rule override existing allow rules in the clash CLI?

Yes, a deny rule overrides existing allow rules in the clash CLI. Denials are designed to take precedence, ensuring that risky actions are strictly blocked even if prior allows exist.

What is the best way to enforce security permissions for specific command patterns?

The best way to enforce security permissions for specific command patterns is by adding targeted deny rules with explicit confirmation. This approach safely blocks risky tool invocations across all profiles.

How do I safely apply policy changes across multiple profiles?

You safely apply policy changes across multiple profiles by using the clash CLI with explicit confirmation. The system provides dry-run previews and safety rails to enforce rules immediately without unintended side effects.