菜单
Use for safety rails — warns on destructive commands (rm -rf, DROP TABLE, force-push, git reset --hard) and provides freeze mode for focused debugging. Invoke with /stacks-guard.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/stacksjs/stacks --skill stacks-guard命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
Use when adding a new feature end-to-end in a Stacks application — the complete workflow from model definition through migration, action, route, test, and deployment. Covers the recommended order of operations for building features.
Use when working with the Stacks ORM — defining models with defineModel(), model relationships (hasOne, hasMany, belongsTo, belongsToMany, morphOne, hasManyThrough), attributes, traits, factories, computed properties, query building, transactions, or the 50+ built-in models. Covers @stacksjs/orm, storage/framework/orm/, and storage/framework/defaults/app/Models/.
Use when implementing validation in Stacks — type guards (isString, isNumber, isBoolean, isObject, isArray, isFunction, etc.), numeric checks (isPositive, isEven, isInteger), the schema builder for model attribute validation, or request validation. Covers @stacksjs/validation.
基于 SOC 职业分类
| name | stacks-guard |
| description | Use for safety rails — warns on destructive commands (rm -rf, DROP TABLE, force-push, git reset --hard) and provides freeze mode for focused debugging. Invoke with /stacks-guard. |
| license | MIT |
| compatibility | Bun >= 1.3.0, TypeScript |
| allowed-tools | Read Edit Write Bash Grep Glob |
Prevent destructive actions and enforce focus during debugging sessions.
| Pattern | Risk |
|---|---|
rm -rf /, rm -rf ~, rm -rf . | Catastrophic file deletion |
DROP TABLE, DROP DATABASE, TRUNCATE | Irreversible data loss |
git push --force to main/master | Overwrites shared history |
git reset --hard with uncommitted changes | Loses uncommitted work |
git clean -fd | Deletes untracked files permanently |
buddy migrate:fresh on production | Drops ALL tables |
buddy seed --fresh on production | Truncates all data |
Response:
🔴 GUARD: Destructive command detected
Command: [command]
Risk: [what will be destroyed]
Reversible: [yes/no]
| Pattern | Risk |
|---|---|
git push --force (non-main) | Overwrites remote branch |
rm -rf [specific dir] | Deletes directory tree |
bun remove [core dep] | May break build |
git checkout -- . | Discards all unstaged changes |
| Bulk file moves/renames | May break imports/aliases |
Modifying config/services.ts | Contains API keys |
Modifying storage/framework/core/*/src/index.ts | Public package API |
| Pattern | Note |
|---|---|
git rebase | History rewrite — ensure not shared |
bun update (major versions) | May introduce breaking changes |
| Modifying CI/CD config | Affects deployment pipeline |
| Changing auth/permissions code | Security-sensitive |
| Modifying migration files | Database schema change |
Restrict edits during focused debugging.
/stacks-guard freeze [file or directory pattern]
When active:
/stacks-guard thaw
Produces a summary of all changes.
Before commits, scan for:
console.log, debugger, TODO: removepackage.json changed → bun.lock should toostorage/framework/types/*.d.ts — these are auto-generatedstorage/framework/defaults/app/Models/ without also generating migrationsconfig/services.ts in commits — contains API keysstorage/framework/core/*/package.json versions — workspace packages should stay in syncrm file.txt doesn't need a warning. rm -rf node_modules is fine — it's regenerable.