MCPInstall

git-guardrails-claude-code

by vinvcnCode Quality & Workflow

设置 Claude Code hooks，在危险 git commands（push、reset --hard、clean、branch -D 等）执行前阻止它们。适用于用户想防止破坏性 git 操作、添加 git safety hooks，或在 Claude Code 中阻止 git push/reset 时。

Installs
5.5K
Last 24h
+22
Trending rank
#5411
Security
Pass

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/vinvcn/mattpocock-skills-zh-cn --skill git-guardrails-claude-code
  1. 01

    Install

    Run the command in your project. The CLI asks which agents to install for.

  2. 02

    Describe the task

    Ask your agent for something this skill covers. It loads git-guardrails-claude-code automatically when relevant.

  3. 03

    Review the result

    The agent follows the SKILL.md steps, scripts and references bundled with the skill.

Security audits

Independent scans of the skill's instructions and bundled files.

Gen Agent Trust Hub PassSAFE ·This skill installs safety hooks for Claude Code to prevent the agent from executing destructive Git commands such as push, reset --hard, and clean. It operates by installing a local shell script and updating agent configuration settings.
Socket PassNo alerts
Snyk PassLOW ·Risk: LOW · No issues

SKILL.md

The instructions your agent reads when the skill is triggered.

设置 Git Guardrails

设置一个 PreToolUse hook，在 Claude 执行危险 git commands 前拦截并阻止它们。

会被阻止的命令

  • git push（包括 --force 在内的所有 variants）
  • git reset --hard
  • git clean -f / git clean -fd
  • git branch -D
  • git checkout . / git restore .

被阻止时，Claude 会看到一条 message，说明它无权访问这些 commands。

步骤

1. 询问安装范围

询问用户：只为当前 project 安装（.claude/settings.json），还是为所有 projects 安装（~/.claude/settings.json）？

2. 复制 hook 脚本

bundled script 位于：scripts/block-dangerous-git.sh

根据 scope 复制到目标位置：

  • Project: .claude/hooks/block-dangerous-git.sh
  • Global: ~/.claude/hooks/block-dangerous-git.sh

用 chmod +x 让它可执行。

3. 把 hook 加入 settings

添加到对应 settings file：

Project (.claude/settings.json):

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/block-dangerous-git.sh"
          }
        ]
      }
    ]
  }
}

Global (~/.claude/settings.json):

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "~/.claude/hooks/block-dangerous-git.sh"
          }
        ]
      }
    ]
  }
}

如果 settings file 已存在，把 hook merge 到现有 hooks.PreToolUse array 中，不要覆盖其他 settings。

4. 询问是否定制

询问用户是否要在 blocked list 中添加或移除 patterns。相应编辑复制后的 script。

5. 验证

运行快速测试：

echo '{"tool_input":{"command":"git push origin main"}}' | <path-to-script>

应以 code 2 退出，并向 stderr 打印 BLOCKED message。

FAQ

What does the git-guardrails-claude-code skill do?

设置 Claude Code hooks，在危险 git commands（push、reset --hard、clean、branch -D 等）执行前阻止它们。适用于用户想防止破坏性 git 操作、添加 git safety hooks，或在 Claude Code 中阻止 git push/reset 时。

How do I install git-guardrails-claude-code?

Run npx skills add https://github.com/vinvcn/mattpocock-skills-zh-cn --skill git-guardrails-claude-code in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/git-guardrails-claude-code/ (personal) or .claude/skills/git-guardrails-claude-code/ (project).

Which AI agents can use git-guardrails-claude-code?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is git-guardrails-claude-code safe to install?

Security partners have reviewed it: Gen Agent Trust Hub passed; Socket passed; Snyk passed. As with any skill, read the SKILL.md and bundled scripts before installing.

Who maintains git-guardrails-claude-code?

It is published by vinvcn in vinvcn/mattpocock-skills-zh-cn. It has 5,506 recorded installs.

More from vinvcn/mattpocock-skills-zh-cn

View all →

grill-me

vinvcn/mattpocock-skills-zh-cn

一个用来打磨计划或设计的持续追问式访谈。

6.7K installs

grill-with-docs

vinvcn/mattpocock-skills-zh-cn

一个用来打磨计划或设计的持续追问式访谈，并在过程中创建文档（ADRs 和词汇表）。

Docs & Writing6.3K installs

setup-matt-pocock-skills

vinvcn/mattpocock-skills-zh-cn

为此仓库配置 engineering skills：设置其 issue tracker、triage labels 词汇与 domain docs 布局。在首次使用其他 engineering skills 前运行一次。

Docs & Writing6K installs

tdd

vinvcn/mattpocock-skills-zh-cn

测试驱动开发。适用于用户想用先写测试的方式构建功能或修复缺陷、提到 “red-green-refactor”，或需要集成测试时。

Testing & QA5.9K installs

handoff

vinvcn/mattpocock-skills-zh-cn

把当前对话压缩成交接文档，让另一个代理接手。

Code Quality & Workflow5.9K installs

improve-codebase-architecture

vinvcn/mattpocock-skills-zh-cn

扫描代码库中的深化机会，生成可视化 HTML 报告，然后围绕你选中的候选项继续追问。

Code Quality & Workflow5.9K installs

Popular code quality & workflow skills

View category →

grill-me

mattpocock/skills

A relentless interview to sharpen a plan or design.

Code Quality & Workflow1.4M installs

improve-codebase-architecture

mattpocock/skills

Scan a codebase for deepening opportunities, present them as a visual HTML report, then grill through whichever one you pick.

Code Quality & Workflow1.2M installs

handoff

mattpocock/skills

Compact the current conversation into a handoff document for another agent to pick up.

Code Quality & Workflow1.1M installs

domain-modeling

mattpocock/skills

Build and sharpen a project's domain model. Use when discussing codebase terminology, writing or editing a GLOSSARY.md, or recording or editing an ADR.

Code Quality & Workflow890.6K installs

codebase-design

mattpocock/skills

Shared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable or AI-navigable, or when another skill needs the deep-module vocabulary.

Code Quality & Workflow863.8K installs

diagnosing-bugs

mattpocock/skills

Diagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something broken/throwing/failing/slow.

Code Quality & Workflow848.4K installs