What it does
A shell command hook that approves safe bash commands automatically and still asks before destructive ones. It uses AST-based parsing of the command, so chained commands and pipelines are checked as a whole. Custom deny messages can steer the agent back on track. It works with Claude Code, Gemini CLI and Cursor.
Use cases
- 01Auto-approve read-only commands like git status
- 02Prompt before destructive infrastructure commands
- 03Send the agent a custom message when a command is denied