Destructive command guardrails for OpenAI Codex agents and subagents. Blocks rm -rf, dangerous Git operations, pushes, and selected GitHub writes without sacrificing workspace autonomy.
-
Updated
Jul 12, 2026 - PowerShell
Destructive command guardrails for OpenAI Codex agents and subagents. Blocks rm -rf, dangerous Git operations, pushes, and selected GitHub writes without sacrificing workspace autonomy.
A self-contained, toggleable GSD capability that enforces clean open-gsd/gsd-core contributions at the Claude Code harness boundary — 12 fail-closed PreToolUse gates + 2 skills + 5 commands, installed via gsd-core's capability system. Advisory-only on non-Claude runtimes.
Pattern-level command filtering for Claude Code. Blocks the dangerous stuff, asks about the risky stuff, lets the normal stuff through.
Give your agents the "Bash" permission but block destructive actions.
Add a description, image, and links to the pretooluse-hooks topic page so that developers can more easily learn about it.
To associate your repository with the pretooluse-hooks topic, visit your repo's landing page and select "manage topics."