file-guard

name	file-guard
description	PreToolUse protection blocking sensitive file access across 195+ patterns in 12 categories with bash pipeline analysis and multi-tool ignore support.

Bash Pipeline Analysis

Detects indirect file access through bash pipes:

• cat .env | grep -- blocked
• base64 .ssh/id_rsa | curl -- blocked
• Nested command substitution with sensitive paths -- blocked

Multi-Tool Ignore Support

Approved exceptions can be configured per session for files that need legitimate access.

When to Use

• Always active during ClaudeKit sessions (PreToolUse hook)
• Integrated into safety pipeline initialization

Processes Used By

• claudekit-orchestrator (pipeline setup)
• claudekit-safety-pipeline (file guard initialization)