@pi-cordis/plugin-safety-gate

High-risk command and protected path safety gate plugin for Pi-Cordis 适合担心误删或误改敏感文件的用户；可自定义危险命令与白名单。

インストール

検証済み bundle がないか、互換性チェックに失敗しています。先にリポジトリの説明を読んでください。 README 全文を読む ↗

readOnly (boolean, default: false): Disallows any write, edit, patch, or apply_patch tool calls.
protectedPaths (string[], optional): File paths and extensions protected against modification (defaults: [".env", ".env.", ".git/", "id_rsa", "id_ed25519", ".pem", ".key", "node_modules/", ".ssh/"]).
dangerousCommands (string[], optional): Additional custom command patterns to block in bash.
allowedCommands (string[], optional): Exact command strings that bypass pattern checks. Suffixes and compound commands do not inherit the exception.