by kenryu42 · kenryu42/claude-code-safety-net
A hooks-driven safety net for Claude Code — interceptors catch rm -rf, git reset --hard, force pushes, and uncommitted destructive edits.
Installs as a Claude Code plugin with PreToolUse hooks. Each potentially destructive operation is intercepted and either confirmed or refused based on rules. Includes rules for git, file system, npm, and arbitrary bash.
When to use: You've been bitten by an agent overwriting uncommitted changes.
git reset --hard; expect block.✓ CopiedOutcome: Destructive ops require explicit override.
Pairs naturally with any agent doing repo edits
| Tool | Inputs | When to call | Cost |
|---|---|---|---|
| hook-driven | (see docs) | No callable tools; activates via PreToolUse hooks | 1 call |
hooks-read hooks-writeHooks not firingConfirm settings.json was actually updated; restart Claude Code
False positives on benign git opsTune the per-project rules file
| Alternative | When to use it instead | Tradeoff |
|---|---|---|
| pegasi-ai/reins | You want broader agent guardrails | Heavier setup |
| Manual review | Solo, low-stakes repo | Doesn't scale |