scripts/block-dangerous-git.sh

skills/misc/git-guardrails-claude-code/scripts/block-dangerous-git.sh · 507 B · View on GitHub at 4ae2317

About this file (written at import)

What it does. A Claude Code PreToolUse hook script. It reads the hook’s JSON from stdin, takes .tool_input.command with jq, and checks it against a list of regular expressions (git push, git reset –hard, git clean -fd, git clean -f, git branch -D, git checkout ., git restore ., push –force, reset –hard). On a match it prints a “BLOCKED:” message to stderr and exits with code 2, which blocks the command; otherwise it exits 0. It needs jq, which SKILL.md does not mention.

Why it’s here. Step 2 says “The bundled script is at: scripts/block-dangerous-git.sh” and has the agent copy it to .claude/hooks/ or ~/.claude/hooks/, register it under hooks.PreToolUse with the Bash matcher, and test that it exits with code 2.

scripts/block-dangerous-git.sh

#!/bin/bash

INPUT=$(cat)
COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command')

DANGEROUS_PATTERNS=(
  "git push"
  "git reset --hard"
  "git clean -fd"
  "git clean -f"
  "git branch -D"
  "git checkout \."
  "git restore \."
  "push --force"
  "reset --hard"
)

for pattern in "${DANGEROUS_PATTERNS[@]}"; do
  if echo "$COMMAND" | grep -qE "$pattern"; then
    echo "BLOCKED: '$COMMAND' matches dangerous pattern '$pattern'. The user has prevented you from doing this." >&2
    exit 2
  fi
done

exit 0