{"data":{"slug":"destructive-command-guard","name":"Destructive Command Guard","tagline":"MIT-with-rider hook that blocks destructive agent shell and git commands","category":"agents","categoryName":"AI Agents","url":"https://github.com/Dicklesworthstone/destructive_command_guard","github":"https://github.com/Dicklesworthstone/destructive_command_guard","pricing":"open-source","hook":"dcg is a high-performance agent hook that blocks destructive git/shell/cloud commands before coding agents can wipe your tree.","whatsGood":"MIT with an OpenAI/Anthropic rider (Dicklesworthstone/destructive_command_guard). Rust hook with modular security packs (filesystem, git, k8s/helm, CI, cloud CLIs, and more), allowlists, ask-mode where the host supports it, and install paths across Claude Code, Codex CLI, Gemini CLI, Copilot CLI/Chat, Cursor, Hermes, OpenCode, Grok Build CLI, and related hook surfaces. Built for sub-millisecond blocking so agents do not feel a tax on every command.","theCatch":"Vs sandbox products (E2B/Daytona/AgentBox) and Pi containerization docs: dcg is a deny-list hook on the host agent, not a VM/microVM boundary. The license rider voids rights for OpenAI, Anthropic, and their affiliates/agents — fine for most operators, a hard stop if you are those orgs or building their eval pipelines. Packs can be disabled incorrectly; treat \"disabled packs\" behavior as something you verify, and remember a hook is only as strong as the agent actually invoking it.","verdict":"MIT-with-rider destructive-command hook. Strong default safety net for local coding agents; read the OpenAI/Anthropic rider before corporate adoption.","addedAt":"2026-09-22","featured":false,"domain":"AI Agents","subSpecialty":"Agents","subcategory":"Security","tags":["self-host","permissive","license-unclear","coding-agents","git","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":6186,"starsPerWeek":152,"access":"free","archived":false,"repo":{"createdAt":"2026-01-07","pushedAt":"2026-10-19","license":"NOASSERTION","archived":false,"checkedAt":"2026-10-19"}},"related":[{"slug":"claude-code","name":"Claude Code","tagline":"Terminal-first coding agent with deep repository context"},{"slug":"cursor","name":"Cursor","tagline":"The AI-first code editor that understands your codebase"},{"slug":"devin","name":"Devin","tagline":"Autonomous AI engineer for defined engineering tasks"},{"slug":"stagehand","name":"Stagehand","tagline":"AI-native browser automation that mixes code and natural language"},{"slug":"browser-use","name":"Browser Use","tagline":"Open-source framework for LLM-driven browser agents"}],"links":{"self":"/api/gems/destructive-command-guard","html":"/gems/destructive-command-guard","markdown":"/gems/destructive-command-guard.md","category":"/api/gems?category=agents","categoryPage":"/stacks/agents"}}