diff --git a/src/permissions/checker.ts b/src/permissions/checker.ts
index ca7d0ba..065dafa 100644
--- a/src/permissions/checker.ts
+++ b/src/permissions/checker.ts
@@ -425,6 +425,8 @@ const READ_ONLY_SUBAGENT_TYPES = new Set([
   "Plan",
   "recall", // Conversation history search - Skill, Bash, Read, TaskOutput
   "Recall",
+  "reflection", // Memory reflection - reads history, writes to agent's own memory files
+  "Reflection",
 ]);
 
 /**