freeze

Run the freeze command and provide the target directory path when prompted. The skill saves the absolute path to a state file, and a PreToolUse hook blocks any Edit or Write operation targeting files outside that directory.

The freeze skill registers a PreToolUse hook that reads the file_path from each Edit or Write tool call and returns a permissionDecision of deny when the path falls outside the frozen directory. Allowed paths return an empty decision.

No, the freeze boundary only applies to Edit and Write tools. Read, Bash, Glob, and Grep remain unaffected, which means Bash commands like sed can still modify files outside the boundary.

No, it is designed to prevent accidental edits, not to enforce security. Shell commands executed through Bash can bypass the hook, so it should not be relied on as a sandbox or access control mechanism.

Run the freeze command again to set a new boundary directory, or run the unfreeze command to remove the restriction entirely. Ending the session also clears the freeze state.