Dicklesworthstone/destructive_command_guard

A fast Rust safety hook that blocks destructive shell, git, and filesystem commands before AI coding agents run them. 50+ security packs (databases, Kubernetes, Docker, cloud, Terraform), heredoc/inline-script scanning, CI scan mode, and explain mode; works with Claude Code, Codex, Gemini, Copilot, Cursor, and more.

Latest release v0.16.0 · 1 Nov 2026

1 file for Codex and OpenCode: destructive_command_guard AGENTS.md — 18,888 tokens loaded in every session.

6,259Stars on the repository
1Files it configures its agents with
18,888Tokens loaded in every session
2Agents configured

Instructions

These files are Dicklesworthstone/destructive_command_guard's own configuration — they tell Codex and OpenCode how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.