git-guardrails-claude-code

Block dangerous git commands by installing a PreToolUse hook script that intercepts and prevents high-risk actions like git push, git reset --hard, and git clean -fd before execution. The hook inspects inputs using jq and enforces safety policies defined in your settings.

A PreToolUse hook is a safety mechanism in Claude that inspects tool inputs before execution. It uses jq to parse incoming git commands and blocks destructive operations such as git push, git reset --hard, and git clean -fd, preventing irreversible damage to your repository.

Yes, jq is required to set up the git safety hook. The PreToolUse blocking script relies on jq to inspect and parse incoming tool inputs, ensuring dangerous git commands are accurately identified and blocked before they execute.

You can configure the git safety hook for both local projects and global workflows. By updating the .claude/settings.json file, you can tailor the PreToolUse policy to apply across collaborative coding sessions, CI workflows, or disaster recovery scenarios.

To install the git command blocking hook, copy the hook script to your target location and update your .claude/settings.json file to enable the PreToolUse rule. After setup, test that dangerous git commands are properly blocked before relying on it.

The primary limitation is that the hook only blocks git commands executed through Claude, relying on jq to inspect inputs. It requires manual configuration in .claude/settings.json and does not protect against git commands run outside of the Claude environment.