Damage Control

To prevent dangerous bash commands in Claude Code, you can enforce protective YAML patterns and path restrictions using PreToolUse hooks. This blocks risky commands before execution, securing your development environment from accidental or malicious data loss.

Yes, you can restrict file edits and writes by enforcing path protections like zeroAccessPaths and readOnlyPaths. Applied across Edit and Write tools, these YAML-based patterns safeguard secrets, configurations, and critical project files from unauthorized modification.

Claude Code PreToolUse hooks are scripts that intercept tool calls before execution. By checking commands against YAML-defined patterns, they secure a project by blocking destructive operations and enforcing path restrictions across Bash, Edit, and Write tools.

Yes, Damage Control supports hook scripts written in Python UV or TypeScript Bun. This allows you to implement PreToolUse and PermissionRequest flows that validate commands against your patterns.yaml file before they execute.

You can stop accidental file deletion in CI workflows by defining noDeletePaths in your patterns.yaml configuration. This enforces path protections that block destructive Bash, Edit, or Write tool actions targeting critical project directories.

The best way to secure secrets and configurations is by enforcing zeroAccessPaths and readOnlyPaths via YAML-based patterns. This hardens Claude Code by preventing unauthorized access and modifications to your most sensitive files.