| name | file-guard |
| description | PreToolUse protection blocking sensitive file access across 195+ patterns in 12 categories with bash pipeline analysis and multi-tool ignore support. |
Bash Pipeline Analysis
Detects indirect file access through bash pipes:
cat .env | grep -- blocked
base64 .ssh/id_rsa | curl -- blocked
- Nested command substitution with sensitive paths -- blocked
Multi-Tool Ignore Support
Approved exceptions can be configured per session for files that need legitimate access.
When to Use
- Always active during ClaudeKit sessions (PreToolUse hook)
- Integrated into safety pipeline initialization
Processes Used By
claudekit-orchestrator (pipeline setup)
claudekit-safety-pipeline (file guard initialization)