A pre-execution guard that blocks destructive Git and file system commands, and common attempts to read sensitive files, before a tool call runs. Works with several AI coding agents, including Claude Code.
Claude Code
> /plugin marketplace add kenryu42/cc-safety-net> /plugin install cc-safety-net@cc-safety-net-dev
Codex
$ npx skills add kenryu42/cc-safety-net -a codex
Cursor
$ npx skills add kenryu42/cc-safety-net -a cursor
Gemini CLI
$ npx skills add kenryu42/cc-safety-net -a gemini-cli
GitHub Copilot
$ copilot plugin marketplace add kenryu42/cc-safety-net$ copilot plugin install cc-safety-net@cc-safety-net-dev
OpenCode
$ npx skills add kenryu42/cc-safety-net -a opencode
Windsurf
$ npx skills add kenryu42/cc-safety-net -a windsurf
CC Safety Net (Coding CLI Safety Net) blocks destructive commands and access to secrets such as SSH keys and .env files before the tool call runs. It parses what the command does. Wrapping the command or reordering flags does not hide it. A broken config file falls back to safe defaults instead of stopping your agent. It is not a sandbox: it does not contain processes, set filesystem permissions, or watch network egress.
Note Full documentation → covers installation, configuration, reference material, guides, and the security model. This README is the short version.
CC Safety Net supports these coding agent CLIs on Windows, macOS, and Linux.
git reset --hard, git push --force, and rm -rf on dangerous targets, and install scripts piped from the internet (curl … | bash), even inside bash -c or python -c. See Blocked commands..env files, ~/.aws, and coding-CLI credentials, from the shell and from the agent's file tools. See Secret protection.npx cc-safety-net gui to pick the Standard, Strict, or Paranoid preset and turn rules on or off. See Dashboard..cc-safety-net/ so clones and cloud sessions get the same rules. See Team setup.checkCommand from Node.js without installing the hook. See Library API.You need Node.js 22 or higher. Install into the coding CLIs on this machine, then check that protection is working:
npx -y cc-safety-net@latest install
npx -y cc-safety-net@latest doctor
Update with npx -y cc-safety-net@latest update and uninstall with npx -y cc-safety-net uninstall. Keep the @latest qualifier: a bare cc-safety-net spec can run an older copy from the npx cache. Per-CLI requirements are in Installation.
See CONTRIBUTING.md to report a bug or request a feature.
MIT
Stars on GitHub
View @kenryu42’s profileA pre-execution guard that blocks destructive Git and file system commands, plus common attempts to read sensitive files, before an AI coding agent runs a tool call. Works with Claude Code and several other agent CLIs.
@kenryu42See 12 cc-safety-net alternatives
Reverse engineer anything with agents, from app behavior down to native binaries.
@morlutoA skill pack for authorized reverse engineering, security research, and penetration testing that routes tasks to the right skill and sets up needed tools on demand. It covers API security assessment and Android APK analysis, among others.
@zhaoxuya520Gives an AI agent the step-by-step workflow a senior security analyst follows, covering when to use each technique, what to check first, how to run it and how to verify the result. Covers incident response, forensics, threat intelligence, malware analysis, penetration testing and red teaming.
@mukul975Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files, for privacy and hygiene on content you own. The skill is a thin client: it drives the machinery over HTTP, so the agent host needs no Python.
@guillaumemeyerInstall it with the command on its page. It includes release-notes, cc-safety-net. Its skills do not fire on their own yet. Free and open source.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it