Safety Net
- 7 repo stars
- Updated June 21, 2026
- andreasasprou/agent-skills
Install a guardrail that blocks destructive shell commands before your coding agent executes them during any repo or infra task.
About
Safety Net is an agent plugin skill that stops destructive shell commands before they run, giving developers a default guardrail when Claude Code, Cursor, or similar agents touch git, filesystem, or cloud CLIs. Instead of trusting the model to refuse risky suggestions, the plugin enforces blocks on patterns such as recursive deletes, force pushes, and AWS resource deletions called out in the skill description. It fits developers who automate infra and cleanup via agents but cannot afford one mistaken rm -rf or forced git history rewrite. Complexity is low: install the plugin and let pre-execution hooks filter commands while you still review Security Audits on the catalog page. It does not replace backups, branch protection, or least-privilege IAM—it narrows the blast radius of agent-initiated terminal mistakes across every phase where a shell is used.
- Intercepts shell commands before execution and blocks destructive patterns
- Covers rm -rf, git push --force, AWS deletions, and related high-risk operations
- Plugin sourced from ./plugins/safety-net in the agent-skills repo
- Lightweight policy layer—no substitute for human review of still-risky commands
- Works as a safety net across build, ship, and operate terminal workflows
Safety Net by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
/plugin marketplace add andreasasprou/agent-skills/plugin install safety-net@andreas-agent-skillsAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| repo stars | ★ 7 |
|---|---|
| Last updated | June 21, 2026 |
| Repository | andreasasprou/agent-skills ↗ |
What it does
Install a guardrail that blocks destructive shell commands before your coding agent executes them during any repo or infra task.
Files
Block destructive shell commands before execution. Prevents rm -rf, git push --force, AWS deletions, and more.
safety-net
Source: ./plugins/safety-net
{ "name": "safety-net", "source": "./plugins/safety-net", "description": "Block destructive shell commands before execution. Prevents rm -rf, git push --force, AWS deletions, and more." }
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85