Dicklesworthstone/destructive_command_guard
View on GitHub ↗ ★ 6,318 Rust
A fast Rust safety hook that blocks destructive shell, git, and filesystem commands before AI coding agents run them. 50+ security packs (databases, Kubernetes, Docker, cloud, Terraform), heredoc/inline-script scanning, CI scan mode, and explain mode; works with Claude Code, Codex, Gemini, Copilot, Cursor, and more.
6 mentions on Hacker News by 5 people: 3 stories, 3 comments · first 2026-01-25 · latest 2026-07-12
20082026
-
Someone recommended this in the replies: https://github.com/Dicklesworthstone/destructive_command_gua... Any other must-have tools like this?
comment by ftchd · 2026-07-10 · in GPT-5.6-Sol just accidentally deleted almost ALL of my Mac's files -
I’ve come across dcg - destructive command guard - that claims to have a fast rust based runtime, with prehooks to audit any tool or command executed by an agent and to block them if they fall in some dangerous patterns -…
comment by sathish316 · 2026-02-13 · in I ditched OpenClaw and built a more secure AI agent (Blink and Mac Mini) -
DCG or destructive command guard seems to work like the latter to prevent as many unsafe commands as possible - https://github.com/Dicklesworthstone/destructive_command_gua...
comment by sathish316 · 2026-02-12 · in NanoClaw solves one of OpenClaw's biggest security issues