safety-guard

You can prevent destructive bash commands by monitoring and restricting execution of operations like rm -rf and git push --force within Bash, Write, and Edit tool calls. This safeguards against unauthorized or unintended system changes during autonomous agent operations.

Yes, you can restrict file editing access to specific directories. The skill limits write and edit access to prevent unintended changes, configurable via command flags such as specifying a target directory during activation.

The best way to block git reset --hard operations is using a system protection mode that monitors tool calls for destructive commands. It offers Careful, Freeze, and Guard modes to provide varying levels of operational restriction.

Yes, operation monitoring integrates with risk scoring systems for enhanced observability. It defaults to codex -a never sessions, logs blocked actions, and integrates with ECC 2.0 to provide observability risk scoring.

Use Freeze mode or Guard mode based on your required level of environment safeguarding. The skill offers three modes—Careful, Freeze, and Guard—allowing you to apply precise operational restrictions appropriate for your development or production context.