Back to Skills

careful

Safety guardrails for destructive commands. Warns before rm -rf, DROP TABLE, force-push, git reset --hard, kubectl delete, and similar destructive operations. User can override each warning. Use when touching prod, debugging live systems, or working in a shared environment. Use when asked to "be careful", "safety mode", "prod mode", or "careful mode".

28,165stars3,385forksUpdated 3/20/2026

Security Assessment

High Risk(40/100)

Detected risks:

Destructive Operations([SKILL.md] rm -rf)
Security Score40/100

About careful

The 'careful' skill provides safety guardrails for potentially destructive bash commands, reducing the risk of accidental data loss or system damage. It actively scans commands before execution, identifying patterns like 'rm -rf', 'DROP TABLE', 'git reset --hard', and similar high-risk operations. This skill is designed to prevent inadvertent mistakes when performing sensitive tasks, such as managing production environments or debugging live systems. By flagging dangerous commands, users are prompted to confirm their intent, offering an additional layer of protection during critical workflows.

FAQ

How does the 'careful' skill work?

The skill checks every bash command for destructive patterns before execution. If a dangerous operation is detected, the user is warned and given the option to override and proceed with the command.

Can I override the warnings?

Yes, users can override each warning and proceed with the command if they choose.

What commands are protected by this skill?

Commands like 'rm -rf', 'DROP TABLE', 'git reset --hard', 'git push --force', 'kubectl delete', and 'docker rm -f' are protected. A list of patterns and examples is available in the documentation.

Is the skill session-based?

Yes, the 'careful' skill is session-scoped, meaning it is active only during the current session and will deactivate once the conversation ends or a new session begins.

What commands are exempt from warnings?

Commands like 'rm -rf node_modules', '.next', 'dist', and similar project-specific directories are exempt from warnings.

Install careful

Download and extract the skill files to your .claude/skills/ directory.

Quick Setup:

  1. Copy the skill folder to .claude/skills/
  2. Claude will automatically detect and use the skill

Repository

garrytan/gstack