git-guardrails-claude-code

Topics in the source

• Setup Git Guardrails
• What Gets Blocked
• Steps
• 1. Ask scope
• 2. Copy the hook script
• 3. Add hook to settings
• 4. Ask about customization
• 5. Verify

Sets up a PreToolUse hook that intercepts and blocks dangerous git commands before Claude executes them. git push (all variants including --force) git reset --hard git clean -f / git clean -fd git branch -D git checkout . / git restore . When blocked, Claude sees a message telling it that it does not have authority to access these commands. Ask the user: install for this project only (.claude/settings.json) or all projects (/.claude/settings.json)? The bundled script is at: scripts/block-dangerous-git.sh Copy it to the target location based on scope: Project: .claude/hooks/block-dangerous-git.sh Global: /.claude/hooks/block-dangerous-git.sh Make it executable with chmod +x. Add to the appropriate settings file: Project (.claude/settings.json): Global (/.claude/settings.json): If the settings file already exists, merge the hook into the existing hooks.PreToolUse array. Don't overwrite other settings. Ask if user wants to add or remove any patterns from the blocked list. Edit the copied script accordingly. Run a quick test: Should exit with code 2 and print a BLOCKED message to stderr.