CC Safety Net
PluginBefore tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.
CC Safety Net (Coding CLI Safety Net) blocks destructive commands and access to secrets such as SSH keys and .env files before the tool call runs. It parses what the command does. Wrapping the command or reordering flags does not hide it. A broken config file never blocks anything. It is not a sandbox: it does not contain processes, set filesystem permissions, or watch network egress.
[!NOTE] Full documentation → covers installation, configuration, reference material, guides, and the security model. This README is the short version.
How it works
Supported coding CLIs
CC Safety Net supports these coding agent CLIs on Windows, macOS, and Linux.
 Amp Code |  Antigravity CLI |  Claude Code |  Codex |
 Cursor |  DeepSeek Harness |  Devin CLI |  Factory Droid |
 Gemini CLI |  GitHub Copilot CLI |  Grok Build |  Hermes Agent |
 Kimi Code |  OpenClaw |  OpenCode |  Pi |
Features
- Blocks destructive commands such as
git reset --hard,git push --force, andrm -rfon dangerous targets, even insidebash -corpython -c. See Blocked Commands. - Blocks secret access to SSH keys,
.envfiles,~/.aws, and coding-CLI credentials, from the shell and from the agent's file tools. See Secret Protection. - Tunes the policy in a GUI. Run
npx cc-safety-net guito pick the Standard, Strict, or Paranoid preset and turn rules on or off. See Modes. - Adds blocks through rulebooks: official packs for Terraform, AWS, gcloud, and Azure, or your own JSON. See Official Rulebooks.
- Shares policy through git. Commit
.cc-safety-net/so clones and cloud sessions get the same rules. See Team Setup. - Embeds in your own tools. Call
checkCommandfrom Node.js without installing the hook. See Library API.
Quick start
You need Node.js 18 or higher. Install into the coding CLIs on this machine, then check that protection is working:
npx -y cc-safety-net@latest install
npx -y cc-safety-net@latest doctor
Update with npx -y cc-safety-net@latest update and uninstall with npx -y cc-safety-net uninstall. Keep the @latest qualifier: a bare cc-safety-net spec can run an older copy from the npx cache. Per-CLI requirements are in Installation.
Development
See CONTRIBUTING.md to report a bug or request a feature.
License
MIT
Ähnliche Ressourcen
Gitleaks
CLIDetects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks.
gitleaks/gitleaks30k
pre-commit
CLIMulti-language git hook manager: declare formatting, lint, secret scanning and other hooks in .pre-commit-config.yaml to run automatically before each commit, or have the agent self-check with pre-commit run --all-files before committing.
pre-commit/pre-commit15.6k
Aider
CLIAI pair programming in your terminal: builds a repo map of the whole codebase, auto-commits changes to git, works with Claude, DeepSeek, OpenAI and almost any other model including local ones, and can run lint and tests after edits.
Aider-AI/aider49.6k
SonarQube
PluginSonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.
SonarSource/sonarqube-agent-plugins112
Semgrep Guardian
PluginSemgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.
semgrep/guardian17
RTK (Rust Token Killer)
CLIRust CLI proxy that filters and compresses command output before it reaches the agent's context, covering git, tests, grep, ls and 100+ other commands and cutting bash output by up to about 90%. Hooks automatically rewrite commands run by Claude Code, Codex and others.
rtk-ai/rtk83.6k