Menü
Prevent destructive commands and constrain agent write scope during sensitive or autonomous work.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
Verification loop for Laravel projects: env checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.
Measure browser, API, and build performance baselines and compare regressions before or after changes.
Run browser-based smoke, interaction, visual regression, and accessibility checks against live pages before or after deploys.
Monitor deployed pages and APIs for post-deploy regressions in availability, console errors, and performance thresholds.
Generate or audit design systems, tokens, and visual consistency issues for product UIs.
Pressure-test feature ideas, user journeys, and prioritization decisions before committing to implementation.
| name | safety-guard |
| description | Prevent destructive commands and constrain agent write scope during sensitive or autonomous work. |
Three modes of protection:
Intercepts destructive commands before execution and warns:
Watched patterns:
- rm -rf (especially /, ~, or project root)
- git push --force
- git reset --hard
- git checkout . (discard all changes)
- DROP TABLE / DROP DATABASE
- docker system prune
- kubectl delete
- chmod 777
- sudo rm
- npm publish (accidental publishes)
- Any command with --no-verify
When detected: shows what the command does, asks for confirmation, suggests safer alternative.
Locks file edits to a specific directory tree:
/safety-guard freeze src/components/
Any Write/Edit outside src/components/ is blocked with an explanation. Useful when you want an agent to focus on one area without touching unrelated code.
Both protections active. Maximum safety for autonomous agents.
/safety-guard guard --dir src/api/ --allow-read-all
Agents can read anything but only write to src/api/. Destructive commands are blocked everywhere.
/safety-guard off
Uses PreToolUse hooks to intercept Bash, Write, Edit, and MultiEdit tool calls. Checks the command/path against the active rules before allowing execution.
codex -a never sessions~/.github/safety-guard.log