Agent Skills › XLearnity/gstack › careful

careful

GitHub

提供破坏性命令的安全护栏，在执行 rm -rf、DROP TABLE、force-push 等操作前进行警告并等待确认，防止误操作导致数据丢失或生产事故。

careful/SKILL.md XLearnity/gstack

触发场景

用户要求谨慎模式涉及生产环境操作执行高风险命令

安装

npx skills add XLearnity/gstack --skill careful -g -y

更多选项

非标准路径

npx skills add https://github.com/XLearnity/gstack/tree/main/careful -g -y

不安装直接使用

npx skills use XLearnity/gstack@careful

指定 Agent (Claude Code)

npx skills add XLearnity/gstack --skill careful -a claude-code -g -y

安装 repo 全部 skill

npx skills add XLearnity/gstack --all -g -y

预览 repo 内 skill

npx skills add XLearnity/gstack --list

SKILL.md

Frontmatter

{
    "name": "careful",
    "hooks": {
        "PreToolUse": [
            {
                "hooks": [
                    {
                        "type": "command",
                        "command": "bash ${CLAUDE_SKILL_DIR}\/bin\/check-careful.sh",
                        "statusMessage": "Checking for destructive commands..."
                    }
                ],
                "matcher": "Bash"
            }
        ]
    },
    "version": "0.1.0",
    "description": "Safety guardrails for destructive commands. Warns before rm -rf, DROP TABLE,\nforce-push, git reset --hard, kubectl delete, and similar destructive operations.\nUser can override each warning. Use when touching prod, debugging live systems,\nor working in a shared environment. Use when asked to \"be careful\", \"safety mode\",\n\"prod mode\", or \"careful mode\".\n",
    "allowed-tools": [
        "Bash",
        "Read"
    ]
}

/careful — Destructive Command Guardrails

Safety mode is now active. Every bash command will be checked for destructive patterns before running. If a destructive command is detected, you'll be warned and can choose to proceed or cancel.

mkdir -p ~/.gstack/analytics
echo '{"skill":"careful","ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","repo":"'$(basename "$(git rev-parse --show-toplevel 2>/dev/null)" 2>/dev/null || echo "unknown")'"}'  >> ~/.gstack/analytics/skill-usage.jsonl 2>/dev/null || true

What's protected

Pattern	Example	Risk
`rm -rf` / `rm -r` / `rm --recursive`	`rm -rf /var/data`	Recursive delete
`DROP TABLE` / `DROP DATABASE`	`DROP TABLE users;`	Data loss
`TRUNCATE`	`TRUNCATE orders;`	Data loss
`git push --force` / `-f`	`git push -f origin main`	History rewrite
`git reset --hard`	`git reset --hard HEAD~3`	Uncommitted work loss
`git checkout .` / `git restore .`	`git checkout .`	Uncommitted work loss
`kubectl delete`	`kubectl delete pod`	Production impact
`docker rm -f` / `docker system prune`	`docker system prune -a`	Container/image loss

Safe exceptions

These patterns are allowed without warning:

rm -rf node_modules / .next / dist / __pycache__ / .cache / build / .turbo / coverage

How it works

The hook reads the command from the tool input JSON, checks it against the patterns above, and returns permissionDecision: "ask" with a warning message if a match is found. You can always override the warning and proceed.

To deactivate, end the conversation or start a new one. Hooks are session-scoped.