Agent skill

Safety Guard

by affaan-m in affaan-m/ECC

“使用此技能可防止在生产系统上工作或自主运行代理时进行破坏性操作。”

— description from SKILL.md by affaan-m
MITAuto-check: notes

Install Safety Guard

skills CLI
$ npx skills add affaan-m/ECC --skill safety-guard -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install affaan-m/ECC safety-guard --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .claude/skills && cp -r skills-src/docs/zh-CN/skills/safety-guard .claude/skills/safety-guard && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
safety-guard
GitHub stars
276k
Token cost
~255 tokens
SKILL.md length
45 words
Files
1
Skills in repo
683
Repo updated
First seen
Licence
MIT

At a glance

  • SKILL.md covers 使用场景, 工作原理, 实现方式 and 集成方案
  • Calls codex

About this skill

Safety Guard is a skill in affaan-m/ECC (276k stars). Its SKILL.md is about 255 tokens. Licence: MIT.

What it can do on your machine

Read from SKILL.md and the folder at commit 4eb71d9. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • codex

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Safety Guard loads about 255 tokens when it runs. Until then it costs about 11 tokens; SKILL.md has 45 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~11
When it runs · the whole SKILL.md, loaded when a task matches
~255

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NoteRuns commands with sudoSKILL.md:34
    - sudo rm

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from affaan-m/ECC at commit 4eb71d9, republished under its MIT licence (© affaan-m). 45 words, ~255 tokens.

Download SKILL.mdSave it as .claude/skills/safety-guard/SKILL.md (or your agent's skills folder).
name
safety-guard
description
使用此技能可防止在生产系统上工作或自主运行代理时进行破坏性操作。
origin
ECC

安全防护 — 防止破坏性操作

使用场景

  • 在生产系统上工作时
  • 代理以全自动模式运行时
  • 希望将编辑限制在特定目录时
  • 敏感操作期间(迁移、部署、数据变更)

工作原理

三种保护模式:

模式 1:谨慎模式

在执行破坏性命令前进行拦截并发出警告:

已监控的模式:
- rm -rf(特别是 /、~ 或项目根目录)
- git push --force
- git reset --hard
- git checkout .(丢弃所有更改)
- DROP TABLE / DROP DATABASE
- docker system prune
- kubectl delete
- chmod 777
- sudo rm
- npm publish(意外发布)
- 任何带有 --no-verify 的命令

检测到时:显示命令功能、请求确认、建议更安全的替代方案。

模式 2:冻结模式

将文件编辑锁定到特定目录树:

/safety-guard freeze src/components/

任何在 src/components/ 之外的写入/编辑操作都会被阻止并附带说明。适用于希望代理专注于某个区域而不触及无关代码的场景。

模式 3:守护模式(谨慎+冻结组合)

双重保护同时生效。为自主代理提供最高安全性。

/safety-guard guard --dir src/api/ --allow-read-all

代理可读取任何内容,但仅能写入 src/api/。破坏性命令在所有位置均被阻止。

解锁
/safety-guard off

实现方式

通过 PreToolUse 钩子拦截 Bash、Write、Edit 和 MultiEdit 工具调用。在执行前根据活动规则检查命令/路径。

集成方案

  • 默认在 codex -a never 会话中启用
  • 配合 ECC 2.0 的可观测性风险评分
  • 所有被阻止的操作记录至 ~/.claude/safety-guard.log

© affaan-m, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in docs/zh-CN/skills/safety-guard of affaan-m/ECC.

Open the folder on GitHubat commit 4eb71d9

Compare with similar skills

Safety Guard next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Safety Guard compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Safety Guard this skillaffaan-m/ECC276k—~255Automated safety check: NotesMIT
Guard Modegarrytan/gstack136k—~1kAutomated safety check: NotesMIT
Python Type Safetywshobson/agents40k—~1.4kAutomated safety check: PassMIT
Runaway Guardsickn33/agentic-awesome-skills47k1 repos~5.7kAutomated safety check: NotesApache-2.0
JSON Safetythedaviddias/Front-End-Checklist74k—~512Automated safety check: PassMIT
Safety Scanruvnet/ruflo74k—~409Automated safety check: NotesMIT

Similar skills

  • Guard Mode

    garrytan/gstack

    Switches on full safety by combining warnings before destructive commands with a block on edits outside one directory you choose, for work on production or live systems.

    136k GitHub stars~1k tokensUpdated today
    Agent WorkflowsAuto-check: notes
  • Python Type Safety

    wshobson/agents

    Python type safety with type hints, generics, protocols, and strict type checking.

    40k GitHub stars~1.4k tokensUpdated 6 days ago
    DevelopmentAuto-check passed
  • Runaway Guard

    sickn33/agentic-awesome-skills

    Cost-safety discipline for paid AI / inference APIs: treat $-cost as a third complexity dimension alongside time and space.

    47k GitHub starsUsed in 1 repo~5.7k tokens
    Auto-check: notes
  • JSON Safety

    thedaviddias/Front-End-Checklist

    A skill your agent uses when reviewing scripts, client components, bundles, or runtime behavior related to Parse JSON safely with error handling.

    74k GitHub stars~512 tokensUpdated 5 days ago
    DevelopmentAuto-check passed
  • Safety Scan

    ruvnet/ruflo

    Scan inputs for prompt injection, unsafe content, and adversarial attacks using AIDefence.

    74k GitHub stars~409 tokensUpdated yesterday
    SecurityAuto-check: notes
  • Safety Stock Review

    davila7/claude-code-templates

    Size or audit safety stock with assumption checks - the zsigmasqrt(LT) formula plus an empirical stress test of what it actually delivers (cycle service vs fill rate) per variability class.

    33k GitHub stars~869 tokensUpdated yesterday
    Testing & QAAuto-check passed

More from affaan-m/ECC

All 682 skills in this repo
  • Skill Stocktake

    affaan-m/ECC

    Audits your installed Claude skills and commands for quality, with a quick mode for recently changed skills and a full mode that evaluates all of them through subagents.

    277k GitHub starsUsed in 5 repos~3.1k tokens
    Auto-check passed
  • Ingests, indexes, searches, edits and monitors video, audio and live streams through the VideoDB Python SDK, returning stream links, clips and timestamps.

    277k GitHub starsUsed in 3 repos~3.5k tokens
    Auto-check: notes
  • Docs Governance

    affaan-m/ECC

    Route broad documentation-governance requests to existing ECC skills and run an opt-in, read-only audit of mapped documentation roles, links, ADR indexes, and evidence references.

    277k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Rules Distillation

    affaan-m/ECC

    Scans installed skills for principles that recur across them and proposes rule-file changes: append, revise, add a section, create a file or leave as covered.

    277k GitHub starsUsed in 2 repos~2.3k tokens
    Auto-check passed
  • Builds DRAFT counterparty agreements from one markdown template and a small JSON spec per party, with clauses picked by the party's role.

    277k GitHub stars~2.9k tokensUpdated today
    Auto-check passed
  • Set an ECC-specific frontend design direction for production UI work.

    277k GitHub starsUsed in 1 repo~2.2k tokens
    Auto-check passed

Questions about Safety Guard

How do I install Safety Guard in Claude Code?

Run `npx skills add affaan-m/ECC --skill safety-guard -a claude-code`. Or copy the skill folder (docs/zh-CN/skills/safety-guard in affaan-m/ECC) into .claude/skills/safety-guard in your project. Claude Code loads it when a task matches its description.

How do I install Safety Guard in Codex?

Run `npx skills add affaan-m/ECC --skill safety-guard -a codex`. Or copy the skill folder (docs/zh-CN/skills/safety-guard in affaan-m/ECC) into .agents/skills/safety-guard in your project. Codex loads it when a task matches its description.

Can I use Safety Guard in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add affaan-m/ECC --skill safety-guard -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/safety-guard, .gemini/skills/safety-guard, .github/skills/safety-guard and .opencode/skills/safety-guard in your project.

What does Safety Guard need to run?

Going by SKILL.md and its folder, Safety Guard needs the command-line tools its instructions call (codex).

Does Safety Guard access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Safety Guard safe to install?

Our automated static check of SKILL.md found notes only (runs commands with sudo), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Safety Guard use?

Safety Guard is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Safety Guard use?

About 255 tokens (SKILL.md is roughly 1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Safety Guard?

Skills that share tags, products or a category with Safety Guard: Guard Mode (garrytan/gstack, 136k stars), Python Type Safety (wshobson/agents, 40k stars), Runaway Guard (sickn33/agentic-awesome-skills, 47k stars) and JSON Safety (thedaviddias/Front-End-Checklist, 74k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Safety Guard?

affaan-m (a GitHub user) maintains it in affaan-m/ECC, which has 276,111 GitHub stars. The repository holds 683 skills in this directory. The repository was last updated on October 10, 2026.

Source: affaan-m/ECC on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.