diff --git a/packages/opencode/src/kilocode/agent/index.ts b/packages/opencode/src/kilocode/agent/index.ts
index f122a4cc6ae..e591545429a 100644
--- a/packages/opencode/src/kilocode/agent/index.ts
+++ b/packages/opencode/src/kilocode/agent/index.ts
@@ -118,6 +118,8 @@ export const readOnlyBash: Record<string, "allow" | "ask" | "deny"> = {
   "* >| *": "deny",
   "sort -o *": "deny",
   "sort * -o *": "deny",
+  "sort --output*": "deny",
+  "sort * --output*": "deny",
 }
 
 function askGuard(mcp: Record<string, "allow" | "ask" | "deny"> = {}) {
diff --git a/packages/opencode/test/kilocode/ask-agent-permissions.test.ts b/packages/opencode/test/kilocode/ask-agent-permissions.test.ts
index dc80b61c2ac..ee9a60f2ea0 100644
--- a/packages/opencode/test/kilocode/ask-agent-permissions.test.ts
+++ b/packages/opencode/test/kilocode/ask-agent-permissions.test.ts
@@ -114,6 +114,8 @@ describe("Ask agent bash permissions", () => {
       "cat a > b",
       "jq . a.json > b.json",
       "sort names.txt -o names.txt",
+      "sort --output=names.txt names.txt",
+      "sort names.txt --output=names.txt",
     ]
 
     for (const cmd of denied) {