Add HardStop — pre-execution command safety plugin
@frmorettochecks…master → master5 files · +1645 −0updated 4mo agoloading diff…
@frmorettochecks…master → master5 files · +1645 −0updated 4mo ago@frmorettochecks…master → master5 files · +1645 −0updated 4mo agoHardStop — a pre-execution safety layer that blocks dangerous shell commands and credential file reads before they run.
| Feature | security-guidance | hardstop |
|---|---|---|
| Scope | Warns about security issues in code being written | Blocks dangerous commands being executed |
| Hook target | Edit|Write|MultiEdit | Bash|PowerShell|Read |
| Method | Prompt-based reminder | 428 regex patterns + LLM semantic analysis |
| Action | Warns (allows) | Blocks (denies execution) |
| Fail mode | N/A | Fail-closed (blocks when uncertain) |
rm -rf /, dd if=/dev/zero, mkfs.ext4)terraform destroy, kubectl delete namespace production)cat ~/.ssh/id_rsa, env | grep secret).env, .aws/credentials, SSH keys)