git-guardrails-claude-code

A setup guide (documented bilingually in Chinese and English) for installing a Claude Code PreToolUse hook that intercepts and blocks dangerous git commands before Claude runs them. It suits users who want to prevent destructive git operations or add git safety guardrails to Claude Code. When a command is blocked, Claude receives a message stating it does not have access to that command.

The hook blocks git push in all variants including --force, git reset --hard, git clean -f and -fd, git branch -D, and git checkout . as well as git restore . The installation steps first ask about scope: install only for the current project via .claude/settings.json or for all projects via ~/.claude/settings.json. A bundled script, block-dangerous-git.sh, is copied into the corresponding hooks directory and made executable with chmod +x.

The hook is then registered under hooks.PreToolUse in the chosen settings file with a Bash matcher pointing at the script, and if a settings file already exists the entry is merged into the existing PreToolUse array rather than overwriting other settings. The guide invites customizing the blocked pattern list by editing the copied script, and finishes with a verification step that pipes a test JSON payload (a git push command) into the script and expects it to exit with code 2 and print a BLOCKED message to stderr.