rm -rf ~/ or git checkout -- . can erase hours of uncommitted work. A documented Reddit incident showed Claude CLI deleting an entire home directory.
Instructions in CLAUDE.md or AGENTS.md can help, but an agent can misinterpret or overlook them. CC Safety Net adds an enforced pre-execution check.
What it intercepts
CC Safety Net installs into your coding agent. It runs before the agent’s tool call reaches your machine. It inspects shell commands and file write, edit, search, and patch operations. It then allows the operation or blocks it with a direct reason. A block arrives as a normal tool result, so the agent can continue the task without the blocked operation. The decision is based on intent, not on spelling.git checkout -b feature creates a branch and is allowed; git checkout -- file discards uncommitted changes and is blocked. Both start with the same two words.
For tool operations that an integration forwards, the same inspection protects supported credential-bearing files, including SSH keys, .env files, cloud credential stores, and coding CLI tokens. CC Safety Net blocks matching forwarded reads and writes before the agent accesses the file. Tool coverage differs by integration; see the integration coverage boundaries and the Secret protection reference.
Each agent uses a different integration. Some run CC Safety Net as a short-lived subprocess. Others load it in the agent process. The installer configures the correct integration for your agent. For the full lifecycle of one tool call, see How it works.