Safety Advisory: This skill includes safety checks that check bash commands for destructive operations (rm -rf, DROP TABLE, force-push, git reset --hard, etc.) before execution. When using this skill, always pause and verify before executing potentially destructive operations. If uncertain about a command's safety, ask the user for confirmation before proceeding.

/careful — Destructive Command Guardrails

Safety mode is now active. Every bash command will be checked for destructive patterns before running. If a destructive command is detected, you'll be warned and can choose to proceed or cancel.

mkdir -p ~/.gstack/analytics
echo '{"skill":"careful","ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","repo":"'$(basename "$(git rev-parse --show-toplevel 2>/dev/null)" 2>/dev/null || echo "unknown")'"}'  >> ~/.gstack/analytics/skill-usage.jsonl 2>/dev/null || true

What's protected

rm -rf

rm -r

rm --recursive

rm -rf /var/data

DROP TABLE

DROP DATABASE

DROP TABLE users;

TRUNCATE

TRUNCATE orders;

git push --force

-f

git push -f origin main

git reset --hard

git reset --hard HEAD~3

git checkout .

git restore .

git checkout .

kubectl delete

kubectl delete pod

docker rm -f

docker system prune

docker system prune -a

Safe exceptions

These patterns are allowed without warning:

• rm -rf node_modules

  /

  .next

  /

  dist

  /

  __pycache__

  /

  .cache

  /

  build

  /

  .turbo

  /

  coverage

How it works

The hook reads the command from the tool input JSON, checks it against the patterns above, and returns

permissionDecision: "ask"

To deactivate, end the conversation or start a new one. Hooks are session-scoped.