diff --git a/pkg/config/defaults.go b/pkg/config/defaults.go
index 652491e67..07974b8eb 100644
--- a/pkg/config/defaults.go
+++ b/pkg/config/defaults.go
@@ -262,6 +262,9 @@ func DefaultConfig() *Config {
 			Cron: CronToolsConfig{
 				ExecTimeoutMinutes: 5,
 			},
+			Exec: ExecConfig{
+				EnableDenyPatterns: true,
+			},
 			Skills: SkillsToolsConfig{
 				Registries: SkillsRegistriesConfig{
 					ClawHub: ClawHubRegistryConfig{