diff --git a/packages/web/src/content/docs/agents.mdx b/packages/web/src/content/docs/agents.mdx
index e15ba6cb..c99988ad 100644
--- a/packages/web/src/content/docs/agents.mdx
+++ b/packages/web/src/content/docs/agents.mdx
@@ -389,7 +389,10 @@ description: Code review without edits
 mode: subagent
 permission:
   edit: deny
-  bash: ask
+  bash:
+    "git diff": allow
+    "git log*": allow
+    "*": ask
   webfetch: deny
 ---