careful

Preventing destructive shell commands requires intercepting them before execution. This skill uses a PreToolUse hook for Bash to match risky patterns like recursive deletes or force-pushes, returning a permission decision that asks for user confirmation before proceeding.

Bash safety checks catch destructive Kubernetes and Docker operations by pattern matching. The skill detects commands like kubectl delete for resource cleanup and docker prune for container or image removal, prompting the user for confirmation to prevent operational disruption.

You can safely delete build artifacts without triggering guardrails. The skill applies safe exceptions for common build outputs like node_modules, dist, and caches, allowing these routine deletions to proceed without an extra confirmation warning.

Database drop prevention works by matching destructive SQL patterns in Bash commands. When commands containing SQL DROP or TRUNCATE statements are detected, the skill intercepts the execution and asks for explicit user confirmation to prevent accidental data loss.

Git protection stops hard resets and working-tree discards before they run. The skill detects git reset --hard and other destructive working-tree rewrites, intercepting the command to ask for confirmation and preventing accidental loss of uncommitted changes.