Mk Careful

/careful — Destructive Command Guardrails

Safety mode is now active. Every bash command will be checked for destructive patterns before running. If a destructive command is detected, you'll be warned and can choose to proceed or cancel.

mkdir -p .meowkit/telemetry
echo '{"skill":"careful","ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","repo":"'$(basename "$(git rev-parse --show-toplevel 2>/dev/null)" 2>/dev/null || echo "unknown")'"}'  >> .meowkit/telemetry/skill-usage.jsonl 2>/dev/null || true

What's protected

See references/destructive-patterns.md for full pattern list.

How it works

The guard script reads the command from the tool input, checks it against the patterns above, and (enforced by this project's configured hooks when present) surfaces an "ask" warning if a match is found. You can always override the warning and proceed.

To deactivate, end the conversation or start a new one. Guardrails are session-scoped.

Guardrails

• Bash command guard: Warns before destructive commands (rm -rf, DROP TABLE, force-push, reset --hard, kubectl delete) — enforced by this project's configured hooks when present
• Session-scoped — only active when mk:careful is invoked
• User can override each warning individually
• Interaction with mk:investigate: When careful is active during an investigation, destructive-Bash warnings still fire. Debugging commands that touch state require explicit user confirmation per warning — do not bypass.

Gotchas

• False positives on legitimate operations: Pattern matching rm or drop in file content, not commands → Check command context, not just string presence
• Overly broad regex blocking development: Guard triggers on test fixtures or documentation mentioning destructive commands → Scope guards to actual Bash tool invocations only