What it is
CC Safety Net hooks into coding agent CLIs and checks each shell command before it runs. It blocks destructive Git and file-system commands such as git reset --hard, git push --force and rm -rf on dangerous targets, plus attempts to read SSH keys, .env files and ~/.aws.
It parses what a command actually does, so wrapping it in bash -c or python -c, or reordering flags, does not hide it. Presets, a small dashboard and team rules committed to the repo let a team share one policy. It supports Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI, OpenCode and about a dozen more. One independent developer maintains it; v2.6.19 shipped on 24 October 2026.
Our review
A sandbox keeps an agent inside your project. It does nothing about the agent wrecking the project itself. One confused git reset --hard can wipe an afternoon of uncommitted work, and that is a command no sandbox blocks.
CC Safety Net sits in front of every shell command. Unlike a simple deny list, it works out what the command really does, so the usual tricks of hiding rm -rf inside bash -c, or shuffling flags, do not get through. It supports about 20 agent CLIs, from Claude Code to Codex, and it also refuses reads of SSH keys, .env files and cloud credentials. Rules can be committed to the repo so a whole team shares them.
The catch: the README says plainly that it is not a sandbox. It does not contain processes, set file permissions or watch network traffic. It is one person's project (about 1,800 stars, v2.6.19), and the recommended install pulls @latest every time, which a team should pin.
Our take: a sandbox plus this guard covers both halves of the problem, what the agent can reach and what it can destroy. Stacking a second command-blocking hook collection on top only gets you two rule sets fighting over the same commands.
Where it earns its place
A developer who lets Claude Code auto-approve shell commands
Never lose uncommitted work to a hard reset or force-push
npx -y cc-safety-net@latest install, then doctor to confirm. Destructive Git commands are refused before they run; costs nothing.
A tech lead standardising agent rules across a 12-person team
Give everyone the same blocked-command policy
Commit the .cc-safety-net/ config to the repo and pin the package version in the team setup guide.
Before you commit
- Setup
- Needs Node.js 18+. npx -y cc-safety-net@latest install wires it into every supported CLI on the machine; doctor checks it works.
- Integrations
- Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI, OpenCode, Amp, Devin CLI, Kimi Code and more; a Node.js API.
- Data and privacy
- Runs locally as a hook and sends nothing anywhere. MIT licence.
- Cost at scale
- Free for any team size; there is no paid edition.
- Limits
- Only sees commands the agent runs through hooked tools; no network or file-permission control.
What's good
- Parses commands, so bash -c and flag reordering do not slip past
- Blocks reads of SSH keys, .env and cloud credentials
- Team rules can be committed to git
- Supports about 20 coding agent CLIs
What's not
- Not a sandbox: no process, file-permission or network control
- Single maintainer
- Default install pulls @latest; pin it for teams
Best for
Anyone letting a coding agent run shell commands without approving each one.
Alternatives
CC Safety Net: common questions
- Is CC Safety Net worth it?
- The seatbelt for the damage a sandbox allows on purpose: force-pushes, hard resets and rm -rf inside your own project. We rate it 4.0 out of 5.
- How much does CC Safety Net cost?
- Free and open source under MIT.
- What are the downsides of CC Safety Net?
- Not a sandbox: no process, file-permission or network control; single maintainer; default install pulls @latest; pin it for teams.
- Who is CC Safety Net best for?
- Anyone letting a coding agent run shell commands without approving each one.
- How much does CC Safety Net cost for a team or in production?
- Free for any team size; there is no paid edition.
- Is CC Safety Net safe for company data?
- Runs locally as a hook and sends nothing anywhere. MIT licence.
- What are the best CC Safety Net alternatives?
- The closest alternatives we have reviewed are Anthropic Sandbox Runtime (srt) and security-guidance plugin (Claude Code).
Answers checked Oct 24, 2026.
Make CC Safety Net? Show this rating on your site
