guard-users-openhands

To prevent destructive actions in Openhands CLI workflows, apply safety guardrails that refuse catastrophic commands unless explicitly approved. This enforces scoped approvals for high-risk operations and provides safe defaults during command execution.

To stop secret leakage in an Openhands workspace, apply guardrails that validate actions and prevent credentials from leaking during command execution. The skill enforces safe defaults and scoped approvals to protect sensitive data.

Scoped approvals for high-risk CLI commands are a risk-management mechanism that requires explicit authorization for exact payloads before execution. This ensures catastrophic actions are refused unless specifically approved by the user.

Yes, Openhands CLI supports exact-payload approvals for risky commands by reading skill metadata and validating actions. It satisfies policy configuration requirements by enforcing scoped approvals and safe default behavior within workspace sessions.

To configure guardrails that refuse catastrophic actions in Openhands, apply the policy to your CLI workspace. The skill reads its metadata to validate actions, enforcing safe defaults and scoped approvals for risky commands.