#550 by GitHub stars
kenryu42/cc-safety-net
Operate CC Safety Net: explain why a command was blocked, triage false positives, configure custom rulebooks, manage agent CLI integrations, and diagnose protection.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/cc-safety-net/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
a84eb80e5e93 → 0fb31bdf3f5b
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → a84eb80e5e93
No earlier version was observed for comparison.
View on GitHubAdd to my skills
Verified commit 0fb31bdf3f5b6f308b51bb0a9807f572fb4f510e
git clone --filter=blob:none --no-checkout https://github.com/kenryu42/cc-safety-net.git .hotskills/kenryu42-cc-safety-net && git -C .hotskills/kenryu42-cc-safety-net checkout --detach 0fb31bdf3f5b6f308b51bb0a9807f572fb4f510e
# Copy each selected skill directory from .hotskills/kenryu42-cc-safety-net into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/kenryu42/cc-safety-net.git .hotskills/kenryu42-cc-safety-net && git -C .hotskills/kenryu42-cc-safety-net checkout --detach 0fb31bdf3f5b6f308b51bb0a9807f572fb4f510e
# Copy each selected skill directory from .hotskills/kenryu42-cc-safety-net into .agents/skills/<skill-name>/1.9kGitHub stars
62stars in 7 days
1skill in this repository
296commits in 30 days
Heat
8.2- Star growth, last 7 daysAhead of 95% of tracked repositories
- Star growth, last 24 hoursAhead of 97% of tracked repositories
- Rank movement, last 7 daysAhead of 84% of tracked repositories
- Commits, last 30 daysAhead of 98% of tracked repositories
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekAhead of 0% of tracked repositories
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
Individual skills in this repository
- cc-safety-net
skills/cc-safety-net
How it works
cc-safety-net
When your agent uses it
Operate CC Safety Net: explain why a command was blocked, triage false positives, configure custom rulebooks, manage agent CLI integrations, and diagnose protection.
What it loads into context
Frontmatter
48 tokensAlways available to the agent
SKILL.md
4,380 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Learn the current CLI
- Core model
- Choose the workflow
- Explain a decision
- Triage a false positive
- Configure rules
- Configure the policy
- Manage integrations
- Diagnose
- Answer from the source
- Safety rules
Files
../../.claude-plugin/marketplace.jsonasset469 bytes../../.claude-plugin/plugin.jsonasset832 bytes../../hooks/hooks.jsonasset247 bytes../../hooks/hooks.jsonasset247 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesSKILL.mdcore17,983 bytesagents/openai.yamlasset86 bytes
Read SKILL.md
# CC Safety Net
CC Safety Net hooks into coding agent CLIs (Claude Code, Codex, Cursor, Gemini CLI, and others)
and blocks destructive commands and secret access before they run. The `cc-safety-net` CLI
inspects and controls that protection. Run it as `npx -y cc-safety-net`.
## Learn the current CLI
The installed CLI is the authority for command syntax. Do not guess flags.
```bash
npx -y cc-safety-net --help
npx -y cc-safety-net help <command>
```Skills included
- cc-safety-net
Repository facts
- License
- MIT
- Created
- Dec 25, 2025
- Last pushed
- Nov 5, 2026
- Forks
- 89
- Open issues
- 3
- Project activity
- Active
Rank over the last 12 weeks
Now #550 · best #449 · down 12 in 30 days
- #554 on Oct 30
- #552 from Oct 31 to Nov 1
- #547 on Nov 2
- #550 from Nov 3 to Nov 4
- #549 on Nov 5
- #550 since Nov 6
72 earlier periods
- #434 on Aug 2
- #439 on Aug 7
- #439 on Aug 9
- #457 on Aug 10
- #454 on Aug 11
- #452 on Aug 12
- #458 on Aug 13
- #453 on Aug 14
- #443 on Aug 15
- #451 on Aug 16
- #463 on Aug 18
- #462 on Aug 19
- #460 on Aug 20
- #463 on Aug 21
- #449 on Aug 22
- #464 on Aug 23
- #465 on Aug 24
- #470 on Aug 25
- #463 on Aug 26
- #475 on Aug 27
- #471 on Aug 28
- #463 on Aug 29
- #451 on Aug 30
- #479 on Sep 2
- #486 on Sep 3
- #473 on Sep 4
- #481 on Sep 6
- #484 on Sep 7
- #497 on Sep 8
- #491 on Sep 10
- #490 on Sep 11
- #487 on Sep 12
- #486 on Sep 13
- #500 on Sep 14
- #497 on Sep 15
- #508 on Sep 16
- #503 on Sep 17
- #508 on Sep 18
- #500 on Sep 20
- #501 on Sep 21
- #514 on Sep 22
- #505 on Sep 23
- #492 on Sep 25
- #490 on Sep 26
- #509 from Sep 27 to Sep 28
- #515 on Sep 30
- #509 on Oct 1
- #507 on Oct 2
- #492 on Oct 3
- #493 on Oct 4
- #501 on Oct 5
- #520 on Oct 6
- #521 on Oct 7
- #538 on Oct 8
- #536 on Oct 9
- #524 on Oct 10
- #523 on Oct 11
- #533 from Oct 12 to Oct 13
- #534 on Oct 14
- #529 on Oct 15
- #531 on Oct 16
- #523 on Oct 17
- #525 on Oct 18
- #534 on Oct 19
- #535 on Oct 20
- #540 on Oct 21
- #526 on Oct 22
- #520 on Oct 23
- #504 on Oct 24
- #554 on Oct 25
- #554 on Oct 28
- #553 on Oct 29
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 5, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 18 notes
hooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/cc-safety-net/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 2 dangerous shell commandsin 1 file: cc-safety-net/SKILL.md:255
- 13 network referencesin 2 files: .claude-plugin/plugin.json:8 cc-safety-net/SKILL.md:90
- No hidden or obfuscated text
- No instruction overrides
- No executable scripts
- No access to secrets
- No requests to vote in Hot
Show all 15 signals by file
.claude-plugin/plugin.json
- Network accessline 8
"email": "jliew@420024lab.com" }, "homepage": "https://github.com/kenryu42/cc-safety-net", - Network accessline 9
}, "homepage": "https://github.com/kenryu42/cc-safety-net", "documentationUrl": "https://ccsafetynet.com/docs", - Network accessline 10
"homepage": "https://github.com/kenryu42/cc-safety-net", - Network accessline 11
"documentationUrl": "https://ccsafetynet.com/docs", - Network accessline 12
"supportUrl": "https://github.com/kenryu42/cc-safety-net/issues", - Network accessline 13
"privacyPolicyUrl": "https://ccsafetynet.com/privacy", - Network accessline 14
"termsOfServiceUrl": "https://github.com/kenryu42/cc-safety-net/blob/main/LICENSE", - Network accessline 15
"repository": "https://github.com/kenryu42/cc-safety-net.git",
skills/cc-safety-net/SKILL.md
- Network accessline 90
`explain --json` and propose a per-rule policy override (see configure the policy). Otherwise explain the risk the rule guards against and suggest reporting the case at https://github.com/kenryu42/cc-safety-net/issues. - Network accessline 92
https://github.com/kenryu42/cc-safety-net/issues. - Dangerous shell operationline 255
trap 'rm -rf -- "$source_dir"' EXIT - Network accessline 256
chmod 700 "$source_dir" git -c init.templateDir= init "$source_dir" git -c core.hooksPath=/dev/null -C "$source_dir" fetch --depth 1 https://github.com/kenryu42/cc-safety-net "$git_head" - Network accessline 257
git -c init.templateDir= init "$source_dir" git -c core.hooksPath=/dev/null -C "$source_dir" fetch --depth 1 https://github.com/kenryu42/cc-safety-net "$git_head" git -c core.hooksPath=/dev/null -C "$source_dir" checkout --detach "$gi - Network accessline 258
git -c core.hooksPath=/dev/null -C "$source_dir" fetch --depth 1 https://github.com/kenryu42/cc-safety-net "$git_head" - Dangerous shell operationline 272
6. Remove a temporary checkout after the source inspection: `rm -rf -- "<source_dir>"`.
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 7 facts
- Network access in prose of the SKILL.mdcc-safety-net/SKILL.md:90Low confidence
- Network access in prose of the SKILL.mdcc-safety-net/SKILL.md:92Low confidence
- Dangerous shell operation in code of the SKILL.mdcc-safety-net/SKILL.md:255High confidence
- Network access in code of the SKILL.mdcc-safety-net/SKILL.md:256High confidence
- Network access in code of the SKILL.mdcc-safety-net/SKILL.md:257High confidence
- Network access in code of the SKILL.mdcc-safety-net/SKILL.md:258High confidence
- Dangerous shell operation in prose of the SKILL.mdcc-safety-net/SKILL.md:272Low confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/cc-safety-net/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/cc-safety-net/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/cc-safety-net/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/cc-safety-net/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
Explore alternatives and comparisons
Add this badge to your README
It updates every night and links to this page.
[](https://hotskills.dev/skill/kenryu42-cc-safety-net/)