kenryu42/cc-safety-net
cc-safety-net
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
Install
npx @deepseek-ai/dsh plugin --profile web add github:kenryu42/cc-safety-netRestart `dsh web` after install. Bundle APIs can change during the developer preview.
README badge
[](https://dshhub.dev/plugins/cc-safety-net)Paste this into your README. The star count updates with every catalog sync.
From the README
Excerpt from kenryu42/cc-safety-net, cleaned of badges and images.
https://github.com/user-attachments/assets/353c1441-9156-483c-b8e5-32fce7905a83
CC Safety Net (Coding CLI Safety Net) blocks destructive commands and access to secrets such as SSH keys and .env files before the tool call runs. It parses what the command does. Wrapping the command or reordering flags does not hide it. A broken config file falls back to safe defaults instead of stopping your agent. It is not a sandbox: it does not contain processes, set filesystem permissions, or watch network egress.
[!NOTE] Full documentation → covers installation, configuration, reference material, guides, and the security model. This README is the short version.
How it works
Supported coding CLIs
CC Safety Net supports these coding agent CLIs on Windows, macOS, and Linux.
<td align="center"><a href="https://ccsafetynet.com/docs/installation/amp-code"><br>Amp Code</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/antigravity-cli"><img alt="Antigravity CLI" src="./.github/assets/antigravity-cli.png" height="32"><br>Antigravity CLI</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/claude-code"><img alt="Claude Code" src="./.github/assets/claude-code.svg" height="32"><br>Claude Code</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/codex"><img alt="Codex" src="./.github/assets/codex.svg" height="32"><br>Codex</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/cursor"><br>Cursor</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/deepseek-harness"><img alt="DeepSeek Harness" src="./.github/assets/deepseek.svg" height="32"><br>DeepSeek Harness</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/devin-cli"><br>Devin CLI</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/factory-droid"><br>Factory Droid</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/gemini-cli"><img alt="Gemini CLI" src="./.github/assets/gemini-cli.svg" height="32"><br>Gemini CLI</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/github-copilot-cli"><br>GitHub Copilot CLI</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/grok-build"><br>Grok Build</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/hermes-agent"><img alt="Hermes Agent" src="./.github/assets/hermes.png" height="32"><br>Hermes Agent</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/kimi-code"><img alt="Kimi Code" src="./.github/assets/kimi-cli.png" height="32"><br>Kimi Code</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/openclaw"><img alt="OpenClaw" src="./.github/assets/openclaw.png" height="32"><br>OpenClaw</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/opencode"><br>OpenCode</a></td>
<td align="center"><a href="https://ccsafetynet.com/docs/installation/pi"><img alt="Pi" src="./.github/assets/pi.svg" height="32"><br>Pi</a></td>
Features
…
