ecc-gateguard

Blocks Edit, Write, and Bash actions until concrete codebase facts are gathered.

Updated May 26, 2026
One-click install
npx skills add https://github.com/avel123111/triplanio --skill ecc-gateguard-avel123111
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ecc-gateguard
Source: https://github.com/avel123111/triplanio/tree/main/.claude/skills/ecc-gateguard
Command: npx skills add https://github.com/avel123111/triplanio --skill ecc-gateguard-avel123111

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? AI coding agents often guess instead of investigating, producing edits that ignore importers, data schemas, and existing patterns. This Skill forces fact-gathering before any file modification or destructive command runs. ## Core Features & Use Cases - Pre-Action Gating: Denies the first Edit, MultiEdit, Write, or destructive Bash attempt and demands concrete facts such as importing files, affected functions, and data schemas. - Tiered Gate Types: Gates edits per file, new file creation, destructive commands (rm -rf, git push --force) every time, and routine Bash once per session. - Use Case: Before editing a shared module, the agent must list every file that imports it and quote the user's instruction, preventing blind changes that break downstream consumers. ## Quick Start Enable the GateGuard PreToolUse hook so the agent must present importer lists and data schemas before editing any file.

Frequently Asked Questions about ecc-gateguard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I stop an AI coding agent from editing files without investigating first?

Install a PreToolUse gate that denies the first Edit or Write attempt and requires the agent to list importing files, affected functions, and data schemas. GateGuard implements this three-stage deny-force-allow flow via a hook script.

What is a PreToolUse hook for Claude Code?

A PreToolUse hook intercepts tool calls like Edit, Write, and Bash before they execute, allowing the hook to deny, modify, or permit the action. GateGuard uses this mechanism to force fact-gathering before file modifications.

Does GateGuard block every Bash command?

No. Routine Bash commands are gated only once per session, while destructive commands like rm -rf, git reset --hard, and git push --force are gated every time. This balance avoids slowdown while catching real risks.

How do I disable GateGuard for setup or repair work?

Start the session with ECC_GATEGUARD=off to bypass the gate entirely. For finer control, use ECC_DISABLED_HOOKS with the GateGuard hook ID to disable it at the hook level.

Why does GateGuard ask for data schemas before edits?

Agents frequently assume wrong data formats, such as ISO-8601 dates when real data uses %Y/%m/%d %H:%M. Requiring schema inspection with redacted values prevents this class of bugs before the edit happens.