What it does
A hook for coding agent command lines that checks what a command would do before it runs. It blocks destructive git and filesystem commands and access to secrets such as SSH keys and .env files. It is not a sandbox. It works with Claude Code, Codex, OpenCode, Gemini CLI and others.
Use cases
- 01Stop an agent from running a destructive git command
- 02Block agent access to .env files and SSH keys
- 03Add a safety check to a shared coding setup