careful
garrytan/gstack / careful
asks you before each destructive command , which improves: avoids accidental deletions and force-pushes
Details
- judge’s score
- 8/10
- place
- outside the packs
- publisher
- garrytan
- status
- new
- pinned commit
- c580561 on GitHub (new tab)
- skill’s last commit
- Oct 19, 2026
- repo stars
- 137,030
- main type
- Building with Claude
Judgement
Clear scope and concrete rules (patterns, exceptions, HIGH level in deny, PowerShell). Very short description, few details on when to use it. Depends on bin/ scripts not provided and on gstack-paths; auto-generated output.
reservations
- Scripts bin/check-careful.sh and bin/hook-extract.sh not provided: the hook's actual behavior could not be verified.
- Frontmatter description too short (« Safety guardrails… »): triggering relies mainly on the triggers list.
- Undocumented dependencies: binary ~/.claude/skills/gstack/bin/gstack-paths and command bun run gen:skill-docs.
- The SKILL.md calls itself « best-effort » on PowerShell while announcing a hard stop; the protection message is ambiguous.
- Triggering
- 1/2
- Added value
- 2/2
- Precision
- 2/2
- Scope
- 2/2
- Quality
- 1/2
Alerts
8 alerts, by category
Static scan
- critical risk
frontmatter hooks (active for the whole session)
- high risk
recursive deletion (rm -rf)
- high risk
bin/ folder
- high risk
scripts run by the SKILL.md
bin/check-careful.sh
- info risk
allowed-tools frontmatter
Bash - Read
- info risk
bundled scripts, not run by the SKILL.md
bin/hook-extract.sh
Network
- high risk
The hook continuously runs a script located in a user-editable path (~/.claude/skills/...) on every Bash command; any alteration of this file runs without control.
Instruction
- medium risk
The safeguard relies on string matching that can be bypassed (commands built at runtime, variables, encoding); do not treat it as a security boundary.
Original description
Safety guardrails for destructive commands. (gstack)
added on Oct 19, 2026 · license MIT