Being Careful

---
name: being-careful
description: Activates safety hooks that block dangerous shell commands for the rest of the session — rm -rf, DROP TABLE, force-push, hard reset, kubectl delete, and other destructive operations. Use when touching production, working with sensitive data, or doing risky operations where an accidental destructive command could cause harm
hooks:
  PreToolUse:
    - matcher: Bash
      hooks:
        - type: command
          command: "if echo \"$CLAUDE_TOOL_INPUT\" | grep -qEi '(rm\\s+-(r|f|rf|fr)\\b|rm\\s+--force|rmdir\\s+/)'; then echo 'BLOCKED: destructive file deletion. Use trash or targeted rm instead.' >&2; exit 2; fi && if echo \"$CLAUDE_TOOL_INPUT\" | grep -qEi '(DROP\\s+(TABLE|DATABASE|SCHEMA|INDEX)|TRUNCATE\\s+TABLE|DELETE\\s+FROM\\s+\\S+\\s*(;|$))'; then echo 'BLOCKED: destructive SQL operation. Review and run manually.' >&2; exit 2; fi && if echo \"$CLAUDE_TOOL_INPUT\" | grep -qEi '(push\\s+.*(\\s+--force\\b|\\s+-f\\b)|push\\s+-f\\b)'; then echo 'BLOCKED: force-push. Use --force-with-lease.' >&2; exit 2; fi && if echo \"$CLAUDE_TOOL_INPUT\" | grep -qEi '(reset\\s+--hard|clean\\s+-f|checkout\\s+--\\s+\\.)'; then echo 'BLOCKED: destructive git operation. Stash or commit first.' >&2; exit 2; fi && if echo \"$CLAUDE_TOOL_INPUT\" | grep -qEi '(branch\\s+-D\\b)'; then echo 'BLOCKED: force branch deletion. Use -d for safe delete.' >&2; exit 2; fi && if echo \"$CLAUDE_TOOL_INPUT\" | grep -qEi '(kubectl\\s+delete|kubectl\\s+.*--force)'; then echo 'BLOCKED: kubectl delete/force. Review and run manually.' >&2; exit 2; fi && if echo \"$CLAUDE_TOOL_INPUT\" | grep -qEi '(docker\\s+(system|volume|container)\\s+prune)'; then echo 'BLOCKED: docker prune. Run manually if intended.' >&2; exit 2; fi"
---

# Being Careful

Activates session-scoped safety hooks that block dangerous shell commands.
Use this when working near production systems, sensitive data, or doing anything where a misfire could cause real damage.

## What Gets Blocked

| Pattern | Why | Safe Alternative |
|---------|-----|-----------------|
| `rm -rf`, `rm -f`, `rm --force` | Irreversible file deletion | `trash`, targeted `rm` on specific files |
| `DROP TABLE`, `TRUNCATE`, bulk `DELETE FROM` | Destructive SQL | Review and run manually |
| `git push --force`, `git push -f` | Overwrites remote history | `git push --force-with-lease` |
| `git reset --hard` | Discards uncommitted work | `git stash` then reset |
| `git clean -f` | Deletes untracked files | `git stash -u` |
| `git checkout -- .` | Discards all working changes | Stash or commit first |
| `git branch -D` | Force-deletes branch | `git branch -d` (safe delete) |
| `kubectl delete`, `kubectl --force` | Destroys cluster resources | Review and run manually |
| `docker system/volume/container prune` | Removes all stopped containers/volumes | Run manually with filters |

## How It Works

The skill registers a PreToolUse hook on Bash that inspects each command before execution.
If a dangerous pattern is matched, the command is blocked (exit code 2) and Claude sees the reason in stderr.
Claude can then suggest a safer alternative.

The hooks are **session-scoped** — they activate when you invoke `/being-careful` and last until the session ends.
They do not affect other sessions or persist between sessions.

## Gotchas

- The patterns use regex matching, so they may occasionally match in string literals or comments within commands. If a legitimate command is blocked, you can run it manually outside Claude.
- `git push --force-with-lease` is intentionally allowed — it's the safe alternative to force-push.
- The hook does not block `rm` without `-rf`/`-f` flags — targeted file removal is still permitted.
- SQL patterns match case-insensitively, so `drop table` and `DROP TABLE` are both caught.