CC Safety Net docs

Stop your coding agent from running git reset —hard, rm -rf ~/, or cat .env. CC Safety Net checks every command before it runs and blocks the ones that destroy work or expose secrets.

CC Safety Net is free and MIT licensed. It runs locally and calls no LLM.

What’s new in v2.7.3

Released November 4, 2026

network.upload-remote now blocks only in strict and paranoid. At standard, a curl or wget upload to a non-loopback host runs unless you turn the rule on, so read-only JSON-RPC, GraphQL, and webhook calls are no longer blocked. See Data uploads to a remote host.
From your home directory, a recursive-delete target built from a variable or a wildcard now blocks at every safety level under rm.recursive-force-home-cwd. rm -rf “$target” used to be allowed at standard. See Filesystem commands.
secret.cli.claude-code.config now covers a project’s .claude/settings.json, and secret.cli.codex.config covers its .codex/config.toml. Writing to either file reconfigures the agent for that project. Both rules are off by default. See Coding CLI config tier.

Update every installed integration with npx -y cc-safety-net@latest update. Read the full release notes.

Quickstart guide

CC Safety Net runs on Windows, macOS, and Linux.

Get started Quickstart

$ git checkout — src/main.pyBLOCKED by CC Safety NetReason: discards uncommitted changes.$ git checkout -b safety-checkALLOWEDReason: creates a branch safely.

CC Safety Net is a pre-execution hook, not a sandbox. See Known limitations for what it cannot catch.

Supported agents and CLIs

Use the same hook with each supported agent and CLI that runs shell commands. See Installation for the complete list and the install and uninstall commands.