LibreAI / Dev Tools / destructive_command_guard
// devtools · Dicklesworthstone/destructive_command_guard

destructive_command_guard

A guard that blocks dangerous git and shell commands before AI agents can execute them.

★ 6.1k stars⑂ 253 forksMITupdated 2026-10
▦ visual — this project's README ships no embeddable screenshot,
so here's a placeholder. The guide below is complete regardless.
// project facts

Project facts

destructive_command_guard is an open-source dev tools project by Dicklesworthstone (Dicklesworthstone/destructive_command_guard on GitHub). It has 6,120 GitHub stars and 253 forks, is released under the MIT license, and was last updated on GitHub on 8 October 2026.

GitHub stars
6,120
Forks
253
License
MIT
Last updated on GitHub
8 October 2026
Category
Dev Tools
Listing
Full install guide
// how it works

How it works

  1. Clarify the risk

    If an agent with shell access could wipe uncommitted work or damage your system, dcg is the seatbelt that sits in its command path.

  2. Install dcg

    Run the installer for your platform, using easy mode if you want sensible defaults.

  3. Configure rule packs

    Review the enabled packs, choose warn/log/ask/block behavior per rule, and add allowlist entries for your legitimate workflows.

  4. Verify the guard

    Have your agent (or yourself) attempt a blocked command such as git reset --hard and confirm dcg intercepts it.

// features

Why people love it

Blocks destructive commands

Intercepts dangerous git and shell commands before execution, explaining the reason and suggesting a safer alternative like git stash.

Rule packs by category

Organized packs cover git, filesystem, database, cloud and platform CLIs (including Azure DevOps), plus Windows-specific packs enabled by default on Windows.

Graduated responses

Rules can block, warn, log silently or ask the operator for review where the hook protocol supports it, with severity ladders and presets such as strict_git.

Agent-specific profiles

Automatically detects which AI coding agent invoked it and applies per-agent disabled/extra packs and allowlists; Codex CLI is a first-class hook target alongside Claude Code.

Secret-disclosure protection

An opt-in pack blocks value-emitting secret reads from tools like Infisical, 1Password, Doppler, Vault and AWS Secrets Manager.

Explainable decisions

dcg explain --format json shows exactly which rule and mode would apply to a command before you rely on it.

Advertisement
// run it

Run it yourself

  1. Clone the repository

    Clone the guard if you want the source; most users install the released binary in the next step.

    git clone https://github.com/Dicklesworthstone/destructive_command_guard.git
    cd destructive_command_guard
  2. Install dcg

    Run the official installer in easy mode (a PowerShell installer is provided for Windows).

    curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/destructive_command_guard/main/install.sh?$(date +%s)" | bash -s -- --easy-mode
  3. Test the guard

    Try a destructive command through your agent hook and confirm dcg blocks it with an explanation.

    git reset --hard HEAD~5
    # dcg intercepts and blocks: git reset --hard destroys uncommitted changes
// use cases

What you can build

Advertisement
// faq

Questions, answered

Who maintains dcg?

The Destructive Command Guard is maintained by Dicklesworthstone (Jeffrey Emanuel).

Is dcg free?

Yes — its LICENSE is the MIT License with an additional OpenAI/Anthropic rider; read the LICENSE file for the exact terms.

Does it need a paid API key?

No. dcg is a local Rust binary that evaluates commands against rule packs; no network service or key is involved.

How does it compare to agent permission prompts?

Permission prompts ask about every command or broad categories; dcg evaluates the actual command content against curated destructive-command packs and can block, warn or ask per rule.

How do I get started?

Run the installer with --easy-mode, then test it by attempting git reset --hard through your agent.

// keep exploring

Similar tools

Dev Tools

open-terminal

Open Terminal — a computer you can curl: a sandboxed terminal API for AI agents, from Open WebUI.

★ 3.3k starsMIT
View guide →
Dev Tools

mcp_agent_mail

Gmail for coding agents: identities, inboxes, threads, and file leases over FastMCP, Git, and SQLite.

★ 2.2k starsNOASSERTION
View guide →
Dev Tools

aichat

One Rust CLI for every LLM: shell assistant, chat REPL, RAG, tools and agents across 20+ providers.

★ 10.5k starsApache-2.0
View guide →
Dev Tools

Athas

A lightweight, cross-platform code editor, built with Tauri (Rust and React) with Git support, AI agents, vim keybindings

★ 3.1k starsCustom (check repo)
View guide →
Dev Tools

differ

A two-panel terminal UI for git diffs, with AI commits.

★ 58 starsMIT
View guide →
Dev Tools

paperjury

Stress-test your research paper with an AI reviewer before submission.

★ 1.2k starsMIT
View guide →
// alternatives

Alternatives in Dev Tools

The most-starred other Dev Tools projects in the LibreAI catalogue — the realistic shortlist if destructive_command_guard is not the right fit.

Get destructive_command_guard

Free and open — grab the source, star the repo, and start creating.