safety-essentials

{
  "name": "safety-essentials",
  "description": "5 essential safety hooks for Claude Code. Blocks rm -rf, force-push, hard-reset, .env overwrites, and package publish. The minimum viable safety net from 800+ hours of autonomous operation.",
  "version": "1.2.0",
  "author": {
    "name": "yurukusa"
  },
  "homepage": "https://yurukusa.github.io/cc-safe-setup/",
  "repository": "https://github.com/yurukusa/cc-safe-setup",
  "license": "MIT",
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "INPUT=$(cat); CMD=$(printf %s \"$INPUT\" | { if command -v jq >/dev/null 2>&1; then jq -r '.tool_input.command // empty' 2>/dev/null; elif command -v python3 >/dev/null 2>&1; then python3 -c 'import sys,json;d=json.load(sys.stdin);print((d.get(\"tool_input\") or {}).get(\"command\") or \"\")' 2>/dev/null; elif command -v node >/dev/null 2>&1; then node -e 'let s=\"\";process.stdin.on(\"data\",d=>s+=d).on(\"end\",()=>{try{process.stdout.write(String((JSON.parse(s).tool_input||{}).command||\"\"))}catch(e){}})' 2>/dev/null; else echo __CCHOOK_NO_PARSER__; fi; }); if [ \"$CMD\" = \"__CCHOOK_NO_PARSER__\" ]; then W=/tmp/cc-noparser-warned-safety-essentials-$PPID; [ -f \"$W\" ] || { echo \"WARNING [safety-essentials]: cannot inspect tool calls - jq, python3 and node are all unavailable, so this plugin is NOT protecting you. Install any one of them.\" >&2; : > \"$W\"; }; exit 0; fi; [ -z \"$CMD\" ] && exit 0; if echo \"$CMD\" | grep -qE 'rm\\s([^;&|]*\\s)?-[a-zA-Z]*r[a-zA-Z]*\\s[^;&|]*-[a-zA-Z]*f|rm\\s([^;&|]*\\s)?-[a-zA-Z]*f[a-zA-Z]*\\s[^;&|]*-[a-zA-Z]*r|rm\\s([^;&|]*\\s)?-[a-zA-Z]*(rf|fr)[a-zA-Z]*(\\s|$)|rm\\s[^;&|]*--recursive[^;&|]*--force|rm\\s[^;&|]*--force[^;&|]*--recursive'; then echo 'BLOCKED [safety-essentials]: rm -rf detected. Use git clean or manual deletion instead.' >&2; exit 2; fi"
          }
        ]
      },
      {
        "matcher": "Bash",
        "hooks": [