Destructive Command Guard
Rust CLI that blocks dangerous git and shell commands before an agent can run them. Pattern-matched safety net for autonomous coding agents.
This entry doesn't have a long-form writeup yet. Follow the source link above for the full context.
Recent discussion
From the wider webShow HN: A small hook to prevent agents from destructive things
gist.github.com · Apr 28, 2026
9 seconds: a Cursor agent deleted a production database while quoting its own destructive-actions rule
dev.to · Apr 27, 2026
Mystery Around Venezuelan Cyberattack Deepens, with New Discovery of "Highly Destructive" Wiper
reddit.com · Apr 26, 2026
Sweden blames Russian hackers for attempting 'destructive' cyberattack on thermal plant
reddit.com · Apr 15, 2026
Sweden blames Russian hackers for attempting ‘destructive’ cyberattack on thermal plant
techcrunch.com · Apr 15, 2026
Featured in
Rust CLI and TUI tools worth installing
Fast, single-binary command-line tools written in Rust - covering git, logs, sandboxes, code intelligence, and terminal workflows.
Security tools for AI coding agents
Sandboxes, scanners, proxies, and governance toolkits that keep autonomous agents from doing damage.
Git workflow tools beyond the basics
Better diffs, mob programming, parallel worktrees, multi-repo management, and TUI commit graphs - the git tools worth knowing past `git rebase`.
Related entries
Zerobox - process sandboxing on the Codex runtime
Lightweight, cross-platform process sandbox in Rust. Wraps any command with file, network, and credential controls - built on OpenAI Codex's runtime primitives.
branch-watch - track branch and fork sync across repos
Rust CLI that monitors branch and fork sync status across your GitHub repositories. Surfaces diverged forks, stale branches, and unmerged PRs from one terminal view.
koji - interactive conventional commits CLI
Rust CLI that walks you through composing a conventional commit, including type, scope, and breaking-change footers. Lightweight alternative to commitizen.
jwt-cli - fast CLI to decode and encode JWTs
Single Rust binary that decodes, encodes, and validates JWTs from the command line. Standard tool when debugging auth flows.