Skip to content

Cc Safety Net

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs.…

PluginDev toolsSecurityAI & LLM tooling

Install

$npx -y cc-safety-net@latest install
Claude Code
claude mcp add cc-safety-net -- npx -y cc-safety-net@latest install
Cursor / Claude Desktop (mcp.json)
{
  "mcpServers": {
    "cc-safety-net": {
      "command": "npx",
      "args": [
        "-y",
        "cc-safety-net@latest",
        "install"
      ]
    }
  }
}

Install command taken from the project's README or registry entry. Always review code before running it.

README excerpt

Read full README on GitHub →

English · 简体中文 · 日本語

https://github.com/user-attachments/assets/928dbe97-31e3-41d1-b35a-7941a701b056

CC Safety Net (Coding CLI Safety Net) blocks destructive commands and access to secrets such as SSH keys and .env files before the tool call runs. It parses what the command does. Wrapping the command or reordering flags does not hide it. A broken config file never blocks anything. It is not a sandbox: it does not contain processes, set filesystem permissions, or watch network egress.

[!NOTE] Full documentation → covers installation, configuration, reference material, guides, and the security model. This README is the short version.

How it works

Supported coding CLIs

CC Safety Net supports these coding agent CLIs on Windows, macOS, and Linux.

Features

  • Blocks destructive commands such as git reset --hard, git push --force, and rm -rf on dangerous targets, even inside bash -c or python -c. See Blocked Commands.
  • Blocks secret access to SSH keys, .env files, ~/.aws, and coding-CLI credentials, from the shell and from the agent's file tools. See Secret Protection.
  • Tunes the policy in a GUI. Run npx cc-safety-net gui to pick the Standard, Strict, or Paranoid preset and turn rules on or off. See Modes.
  • Adds blocks through rulebooks: official packs for Terraform, AWS, gcloud, and Azure, or your own JSON. See Official Rulebooks.
  • Shares policy through git. Commit .cc-safety-net/ so clones and cloud sessions get the same rules. See Team Setup.
  • Embeds in your own tools. Call checkCommand from Node.js without installing the hook. See Library API.

Quick start

You need Node.js 18 or higher. Install into the coding CLIs on this machine, then check that protection is working:

npx -y cc-safety-net@latest install
npx -y cc-safety-net@latest doctor

Update with npx -y cc-safety-net@latest update and uninstall with npx -y cc-safety-net uninstall. Keep the @latest qualifier: a bare cc-safety-net spec can run an older copy from the npx cache. Per-CLI requirements are in Installation.

Development

See CONTRIBUTING.md to report a bug or request a feature.

License

MIT

Similar plugs

Orca

Orca is the ADE for working with a fleet of parallel agents. Run any coding agent with your own subscription. Available on desktop, mobile and remote runtime.

PluginDev tools★ 92.7k
rtk

CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

PluginAI & LLM tooling★ 83.4k
System Prompts Leaks

Documented system prompts from Anthropic - Claude Fable 5.1, Opus 5.5, Claude Design, Claude Code. OpenAI - ChatGPT GPT-6-Astra, Codex. Google - Gemini 3.8 Flash, 3.1 Pro,…

PluginAI & LLM tooling★ 69.7k
CLIProxyAPI

Wrap Antigravity, ChatGPT Codex, Claude Code, Grok Build, Muse Code, Devin as an OpenAI/Gemini/Claude/Codex compatible API service, allowing you to enjoy the free Gemini…

PluginAI & LLM tooling★ 55.3k
Cc Safety Net vs Hermes AgentCc Safety Net vs OrcaCc Safety Net vs rtkCc Safety Net vs Learn Claude Code