---
slug: "cc-safety-net"
name: "CC Safety Net"
effect: "Blocks destructive git and file commands and reads of secret files before a coding agent's tool call runs"
category: "devtool"
tier: "rising"
url: "https://ccsafetynet.com"
github: "kenryu42/cc-safety-net"
pricing: "open-source"
license: "MIT"
tags: ["guardrails", "hooks", "secrets", "git", "coding-agents"]
platforms: ["claude-code", "codex", "cursor", "gemini-cli", "macos", "linux", "windows"]
install_kind: "npm"
date_added: "2026-10-15"
rank: 27
rising_score: 37
stars: 1632
star_velocity: 5.6
velocity_basis: "since creation"
created_at: "2025-12-25T17:52:57Z"
pushed_at: "2026-10-15T05:01:39Z"
signals_status: "ok"
signals_fetched_at: "2026-10-15T05:02:33.222Z"
page: "https://agenttooldrop.com/tools/cc-safety-net"
---

# CC Safety Net

Blocks destructive git and file commands and reads of secret files before a coding agent's tool call runs

Category: Devtools. Tier: new and rising, rank 27 by new and rising score (37 of 100). Pricing: Open source. License: MIT.

Platforms: claude-code, codex, cursor, gemini-cli, macos, linux, windows.

## Why you would want it

CC Safety Net installs as a pre-execution hook in coding CLIs including Claude Code, Codex, Cursor, Gemini CLI, OpenCode and Copilot CLI, and parses what each command does, so wrapping it in bash -c or python -c or reordering flags does not hide it. It blocks commands such as git reset --hard, git push --force and rm -rf on dangerous targets, and access to SSH keys, .env files, ~/.aws and coding CLI credentials. Presets are tuned in a local GUI, official rulebooks add blocks for Terraform, AWS, gcloud and Azure, and committing .cc-safety-net/ shares the policy through git.

## Best for

- Stopping agent force pushes and hard resets
- Keeping agents away from .env files and SSH keys
- Teams running several coding CLIs

## Use it when

You let a coding agent run shell commands and want a check that refuses destructive git and file operations before they execute.

## Skip it if

You need containment: the README says it is not a sandbox and does not contain processes, set filesystem permissions or watch network egress. It is maintained mostly by one developer and needs Node.js 18 or higher.

## Editor note

The README says a broken config file never blocks anything, so a typo fails open rather than stopping the agent.

## Install

Install into your coding CLIs with npx:

```sh
npx -y cc-safety-net@latest install
npx -y cc-safety-net@latest doctor
```

Source: https://github.com/kenryu42/cc-safety-net#quick-start

## Live signals

Fetched 2026-10-15T05:02:33.222Z (status: ok).

- Repository: kenryu42/cc-safety-net
- Repository created: 2025-12-25
- Stars: 1,632 (GitHub's count; it cannot be authenticated)
- Stars per day, since repo creation: 5.6 (an average over the repo's life, not a growth rate)
- Forks: 84
- Open issues and PRs: 1
- License (GitHub): MIT
- Last push: 2026-10-15
- Latest release: v2.6.12 (2026-10-15)

## Links

- Website: https://ccsafetynet.com
- GitHub: https://github.com/kenryu42/cc-safety-net
- Install instructions verified at: https://github.com/kenryu42/cc-safety-net#quick-start
- Source for this entry: https://github.com/kenryu42/cc-safety-net#readme
- AgentToolDrop page: https://agenttooldrop.com/tools/cc-safety-net
- Full catalog (JSON): https://agenttooldrop.com/tools.json