Claude Code rm -rf protection hook — Prevents destructive commands (rm -rf, git reset --hard). After real incidents: 7GB deleted (#46058), entire user profile deleted (#36339). Full safety kit: https://github.com/yurukusa/cc-safe-setup
April 11, 2026 · View on GitHub
#!/bin/bash INPUT=(echo "TOOL" != "Bash" ] && exit 0 CMD=INPUT" | jq -r '.tool_input.command // empty') if echo "CMD" | grep -qiE '(rm\s+(-[a-z]*[rf][a-z]*\s+|--force|--recursive)|git\s+(reset\s+--hard|clean\s+-[a-z]*f|checkout\s+--force)|Remove-Item.*-Recurse.*-Force|del\s+/[sf]|rd\s+/s)'; then echo "BLOCKED: Destructive command detected" >&2 echo "Command: CMD" >&2 echo "Use git stash or confirm manually." >&2 exit 2 fi