How do I install the Safety Guard skill?

Run npx skillmds@latest add sheshiyer/safety-guard in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Safety Guard safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Safety Guard?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Safety Guard free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Safety Guard?

Sheshiyer (@sheshiyer) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Safety Guard by sheshiyer — Agent Skill

Name: Safety Guard
Author: Sheshiyer

Safety Guard

Prevent destructive operations by restricting edits and guarding sensitive commands. USE WHEN working on production systems, running agents in full-auto mode, confining edits to a directory, or performing migrations, deploys, and data changes.

Sheshiyer Updated Sep 17, 2026

File contents

Safety Guard — Prevent Destructive Operations

When to Use

When working on production systems
When agents are running autonomously (full-auto mode)
When you want to restrict edits to a specific directory
During sensitive operations (migrations, deploys, data changes)

How It Works

Three modes of protection:

Mode 1: Careful Mode

Intercepts destructive commands before execution and warns:

Watched patterns:
- rm -rf (especially /, ~, or project root)
- git push --force
- git reset --hard
- git checkout . (discard all changes)
- DROP TABLE / DROP DATABASE
- docker system prune
- kubectl delete
- chmod 777
- sudo rm
- npm publish (accidental publishes)
- Any command with --no-verify

When detected: shows what the command does, asks for confirmation, suggests safer alternative.

Mode 2: Freeze Mode

Locks file edits to a specific directory tree:

/safety-guard freeze src/components/

Any Write/Edit outside src/components/ is blocked with an explanation. Useful when you want an agent to focus on one area without touching unrelated code.

Mode 3: Guard Mode (Careful + Freeze combined)

Both protections active. Maximum safety for autonomous agents.

/safety-guard guard --dir src/api/ --allow-read-all

Agents can read anything but only write to src/api/. Destructive commands are blocked everywhere.

Unlock

/safety-guard off

Implementation

Uses PreToolUse hooks to intercept Bash, Write, Edit, and MultiEdit tool calls. Checks the command/path against the active rules before allowing execution.

Integration

Enable by default for autonomous / full-auto agent sessions
Pair with an observability or risk-scoring layer for an audit trail
Logs all blocked actions to ~/.claude/safety-guard.log

---name: safety-guarddescription: Prevent destructive operations by restricting edits and guarding sensitive commands. USE WHEN working on production systems, running agents in full-auto mode, confining edits to a directory, or performing migrations, deploys, and data changes.---# Safety Guard — Prevent Destructive Operations## When to Use- When working on production systems- When agents are running autonomously (full-auto mode)- When you want to restrict edits to a specific directory- During sensitive operations (migrations, deploys, data changes)## How It WorksThree modes of protection:### Mode 1: Careful ModeIntercepts destructive commands before execution and warns:```Watched patterns:- rm -rf (especially /, ~, or project root)- git push --force- git reset --hard- git checkout . (discard all changes)- DROP TABLE / DROP DATABASE- docker system prune- kubectl delete- chmod 777- sudo rm- npm publish (accidental publishes)- Any command with --no-verify```When detected: shows what the command does, asks for confirmation, suggests safer alternative.### Mode 2: Freeze ModeLocks file edits to a specific directory tree:```/safety-guard freeze src/components/```Any Write/Edit outside `src/components/` is blocked with an explanation. Useful when you want an agent to focus on one area without touching unrelated code.### Mode 3: Guard Mode (Careful + Freeze combined)Both protections active. Maximum safety for autonomous agents.```/safety-guard guard --dir src/api/ --allow-read-all```Agents can read anything but only write to `src/api/`. Destructive commands are blocked everywhere.### Unlock```/safety-guard off```## ImplementationUses PreToolUse hooks to intercept Bash, Write, Edit, and MultiEdit tool calls. Checks the command/path against the active rules before allowing execution.## Integration- Enable by default for autonomous / full-auto agent sessions- Pair with an observability or risk-scoring layer for an audit trail- Logs all blocked actions to `~/.claude/safety-guard.log`

Frequently asked questions