| name | careful |
| description | Safety guardrail that blocks destructive commands for the current session |
Session-scoped safety guardrail that blocks destructive commands. Activate when working near production systems, sensitive data, or critical infrastructure.
Triggers on: "be careful", "careful mode", "production mode", "safety mode"
Announce: "Careful mode ACTIVATED. Destructive commands will be blocked for this session."
`rm -rf`, `rm -r /`, `find -delete` (recursive) — irreversible data loss
`DROP TABLE`, `DROP DATABASE`, `TRUNCATE`, `DELETE FROM` (without WHERE) — irreversible data loss
`git push --force`, `git push -f`, `git reset --hard`, `git branch -D`, `git clean -fd` — history/branch loss
`kubectl delete namespace`, `kubectl delete pod --all` — service disruption
`chmod 777`, `chmod -R 777`, `chmod +s` — security escalation
`npm unpublish`, `cargo yank` — distribution disruption
`rm` on specific files (not recursive on broad paths)
`DROP TABLE IF EXISTS` in migration files
`git push` (without --force)
`git reset --soft`
`kubectl delete pod [specific-pod]` (not --all)
Normal file operations, builds, tests
STOP — do not execute.
BLOCKED by careful mode: [command]. Reason: [category].
Offer safer alternative.
Override for this specific command? (yes/no).
May block legitimate destructive operations in test/dev environments — use override
Migration files: DROP/TRUNCATE is common — still warns but notes migration context
Not a replacement for backups