Safety Net
JohnXu22786/safety-net · skills
A destructive-command interception gate for coding agents: it parses command semantics and judges risk before rm -rf, git reset --hard, git push --force and similar commands actually land, then requires human confirmation.
★ 2GitHub stars
0Forks
2026-08-25Last updated
JavaScriptLanguage
MITLicense
Key features
- Semantic-level command parsingnot string matching.
- ① stdin-hook contract (for harnesses that support "run a hook before tool invocation", such as PreToolUse-style hooks)
- a writes the rule into the user policy file (overrides)
- Not a sandbox, and not a privilege boundary.
- Ships its own POSIX lexer that recognizes quotes, escapes, heredocs, command substitution $(...), sub-shells and pipeline chains
Install command
dsh plugin --profile web add github:JohnXu22786/safety-net