scope-guard

Restrict agent file modifications to defined paths with approval checkpoints.

42|9|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/drvoss/everything-copilot-cli --skill scope-guard-drvoss
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scope-guard
Source: https://github.com/drvoss/everything-copilot-cli/tree/main/skills/copilot-exclusive/scope-guard
Command: npx skills add https://github.com/drvoss/everything-copilot-cli --skill scope-guard-drvoss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Developers often need to limit AI-driven changes to a specific set of files or directories and prevent accidental execution of destructive commands, especially in high‑risk or parallel‑agent scenarios.

Core Features & Use Cases

  • Define Writable Surface – Explicitly state the exact paths or file list the agent may modify.
  • Mode Selection – Choose between Careful (warn on risky commands), Freeze (restrict edits to defined paths), or Guard (combine both) to match the task’s safety requirements.
  • Plan‑Mode Checkpoint – Insert an approval step before any high‑impact operation.
  • Agent Re‑briefing – Restate scope for each delegated or parallel agent to ensure isolation.
  • Explicit Removal – Clear the scope when the restriction is no longer needed.

Typical use cases include production migrations, billing module refactors, or any situation where multiple agents work on separate parts of a codebase and need strict boundaries.

Quick Start

Set a Guard mode scope for src/payments/ and require approval before any destructive command.

Frequently Asked Questions about scope-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I restrict AI code changes to specific file paths?

To prevent destructive commands during code migrations, use a guardrail mode that combines path freezing with risky command warnings. This requires explicit approval before executing any high-impact operations, ensuring safe migrations.

How do I isolate work when running parallel agents on a codebase?

To isolate work when running parallel agents on a codebase, re-brief each delegated agent with a specific path scope. This explicit path ownership prevents overlapping edits and maintains strict boundaries between concurrent tasks.

What is the best way to add approval checkpoints before risky code operations?

The best way to add approval checkpoints before risky code operations is to enable plan-mode checkpoints. This inserts an explicit approval step before any high-impact operation, halting execution until authorized.

Can I clear file scope restrictions after a risky refactoring task is complete?

Yes, you can clear file scope restrictions after a risky refactoring task is complete through explicit removal. This removes the defined writable surface and mode-based guardrails, restoring standard agent permissions.

Does plan-mode work without relying on external scripts for guardrails?

Yes, plan-mode works without relying on external scripts for guardrails. It enforces mode-based restrictions and explicit path ownership directly through the skill's internal logic, satisfying safety requirements natively.