The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview, Comment	Jul 22, 2026 9:00pm

PR Summary

High Risk
Broad authorization changes across skills API, workflow execution, copilot/VFS, and member lifecycle on workspace removal; incorrect deny/grant logic could leak skill content or block legitimate users.

Overview
Introduces per-skill permissions modeled on credentials: admin/member roles, workspace admins as derived skill admins, a workspace-shared toggle for implicit member access, and revoked rows as per-skill deny markers that override sharing. New lib/skills/access centralizes role resolution, member listing, bulk update checks, and cleanup when users leave workspaces or orgs.

API: GET/POST/DELETE /api/skills/[id]/members for roster, share, role change, remove/restore, with last-admin protection on restricted skills. /api/skills now lists and upserts through user-scoped access (skill admin for updates, workspace write for creates), returns workspaceShared and caller role, and masks invisible skills as 404.

Enforcement applies on interactive runs (enforceCredentialAccess): agent/Pi skill load and metadata, copilot skill mentions and VFS skill materialization, and manage_skill copilot tool. Workspace fork copy propagates workspaceShared and skill member rows (including revoked denies).

UI: Gallery opens /workspace/.../skills/[skillId] (legacy ?skillId= redirects); detail page has Share, Save with unsaved guard, Access toggle, and member roster. Shared components/permissions (AddPeopleModal, MemberRow, role options) replaces credential-only duplication. Mothership/inbox paths reuse asserted workspace access for context generation.

^{Reviewed by Cursor Bugbot for commit 6bd6c8f. Configure here.}

Greptile Summary

This PR adds per-skill permissions and a new skill management page. The main changes are:

• Admin and Member roles with workspace-derived access and explicit deny markers.
• Permission checks across APIs, workflows, Copilot, VFS, and agent execution.
• Member-management APIs, hooks, shared controls, and a full-page skill editor.
• Database schema changes and an idempotent access backfill.

Confidence Score: 4/5

Agent execution can bypass skill permissions when its enforcement flag is false or absent.

• API and membership paths consistently apply the new permission model.
• The agent resolver treats a missing enforcement scope as unrestricted access.
• Restricted skill content can reach affected non-interactive runs.

apps/sim/executor/handlers/agent/skills-resolver.ts and its execution callers

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Agent execution] --> B{actor.enforce is true}
  B -- Yes --> C[Load user skill access]
  C --> D[Filter skills with canUseSkill]
  B -- No or unset --> E[Return no access context]
  E --> F[Skip skill permission checks]
  F --> G[Restricted skill content can load]

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
  A[Agent execution] --> B{actor.enforce is true}
  B -- Yes --> C[Load user skill access]
  C --> D[Filter skills with canUseSkill]
  B -- No or unset --> E[Return no access context]
  E --> F[Skip skill permission checks]
  F --> G[Restricted skill content can load]

_{Reviews (1): Last reviewed commit: "fix lint" | Re-trigger Greptile}