CC Safety Net docs
CC Safety Net blocks supported destructive commands and access to credential files before execution. This protects local work and secrets from coding agent mistakes.
Quickstart guide
Runs on Windows, macOS, and Linux.
Already on v1? npx -y cc-safety-net@latest update upgrades every installed integration to v2.
CC Safety Net bases its decision on what a command does, not how it is spelled. It can block one form of git checkout and allow another.
CC Safety Net is a pre-execution check, not a sandbox. See Known limitations for what it cannot catch.
Supported agents and CLIs
Use the same safety layer with each supported agent and CLI that runs shell commands. See Installation for the complete list and the install and uninstall commands.
Where to go next
Choose a page for your current task.
If something looks wrong, start at Troubleshooting. For exact classifier behavior, see Analysis engine. To write rules, see Custom rules.