CC Safety Net docs
Guard your work and your secrets against coding agent mistakes. Block destructive commands and credential file access before they execute.
Quickstart guide
Install CC Safety Net, verify the hook, then run one safe block test.
Runs on Windows, macOS, and Linux.
Already on v1? npx -y cc-safety-net@latest update upgrades every installed integration to v2.
The decision is based on what a command does, not how it is spelled. The same git checkout command can be blocked in one form and allowed in another.
CC Safety Net is a pre-execution check, not a sandbox. See Known limitations for what it cannot catch.
Supported agents and CLIs
Use one safety layer across the supported agents and CLIs that run shell commands. See Installation for the complete list and the install and uninstall commands.
Where to go next
Choose a page for your current task.
If something looks wrong, start at Troubleshooting. For exact classifier behavior, see Analysis engine. To write rules, see Custom rules.