Agent Skills › XLearnity/gstack › guard

guard

GitHub

提供最高级别的安全保护模式，结合破坏性命令警告与目录级编辑限制。用于在生产环境或调试在线系统时防止误操作，确保操作安全。

guard/SKILL.md XLearnity/gstack

Trigger Scenarios

用户要求启用 'guard mode' 用户要求 'full safety' 或 'lock it down' 用户请求 'maximum safety'

Install

npx skills add XLearnity/gstack --skill guard -g -y

More Options

Non-standard path

npx skills add https://github.com/XLearnity/gstack/tree/main/guard -g -y

Use without installing

npx skills use XLearnity/gstack@guard

指定 Agent (Claude Code)

npx skills add XLearnity/gstack --skill guard -a claude-code -g -y

安装 repo 全部 skill

npx skills add XLearnity/gstack --all -g -y

预览 repo 内 skill

npx skills add XLearnity/gstack --list

SKILL.md

Frontmatter

{
    "name": "guard",
    "hooks": {
        "PreToolUse": [
            {
                "hooks": [
                    {
                        "type": "command",
                        "command": "bash ${CLAUDE_SKILL_DIR}\/..\/careful\/bin\/check-careful.sh",
                        "statusMessage": "Checking for destructive commands..."
                    }
                ],
                "matcher": "Bash"
            },
            {
                "hooks": [
                    {
                        "type": "command",
                        "command": "bash ${CLAUDE_SKILL_DIR}\/..\/freeze\/bin\/check-freeze.sh",
                        "statusMessage": "Checking freeze boundary..."
                    }
                ],
                "matcher": "Edit"
            },
            {
                "hooks": [
                    {
                        "type": "command",
                        "command": "bash ${CLAUDE_SKILL_DIR}\/..\/freeze\/bin\/check-freeze.sh",
                        "statusMessage": "Checking freeze boundary..."
                    }
                ],
                "matcher": "Write"
            }
        ]
    },
    "version": "0.1.0",
    "description": "Full safety mode: destructive command warnings + directory-scoped edits.\nCombines \/careful (warns before rm -rf, DROP TABLE, force-push, etc.) with\n\/freeze (blocks edits outside a specified directory). Use for maximum safety\nwhen touching prod or debugging live systems. Use when asked to \"guard mode\",\n\"full safety\", \"lock it down\", or \"maximum safety\".\n",
    "allowed-tools": [
        "Bash",
        "Read",
        "AskUserQuestion"
    ]
}

/guard — Full Safety Mode

Activates both destructive command warnings and directory-scoped edit restrictions. This is the combination of /careful + /freeze in a single command.

Dependency note: This skill references hook scripts from the sibling /careful and /freeze skill directories. Both must be installed (they are installed together by the gstack setup script).

mkdir -p ~/.gstack/analytics
echo '{"skill":"guard","ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","repo":"'$(basename "$(git rev-parse --show-toplevel 2>/dev/null)" 2>/dev/null || echo "unknown")'"}'  >> ~/.gstack/analytics/skill-usage.jsonl 2>/dev/null || true

Setup

Ask the user which directory to restrict edits to. Use AskUserQuestion:

Question: "Guard mode: which directory should edits be restricted to? Destructive command warnings are always on. Files outside the chosen path will be blocked from editing."
Text input (not multiple choice) — the user types a path.

Once the user provides a directory path:

Resolve it to an absolute path:

FREEZE_DIR=$(cd "<user-provided-path>" 2>/dev/null && pwd)
echo "$FREEZE_DIR"

Ensure trailing slash and save to the freeze state file:

FREEZE_DIR="${FREEZE_DIR%/}/"
STATE_DIR="${CLAUDE_PLUGIN_DATA:-$HOME/.gstack}"
mkdir -p "$STATE_DIR"
echo "$FREEZE_DIR" > "$STATE_DIR/freeze-dir.txt"
echo "Freeze boundary set: $FREEZE_DIR"

Tell the user:

"Guard mode active. Two protections are now running:"
"1. Destructive command warnings — rm -rf, DROP TABLE, force-push, etc. will warn before executing (you can override)"
"2. Edit boundary — file edits restricted to <path>/. Edits outside this directory are blocked."
"To remove the edit boundary, run /unfreeze. To deactivate everything, end the session."