From ultraship
Blocks destructive Bash commands like rm -rf, DROP TABLE, git force-push, reset --hard, and restricts file edits to a specific directory. Use for protection on critical systems.
How this skill is triggered — by the user, by Claude, or both
Slash command
/ultraship:guard <directory-to-protect><directory-to-protect>This skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Guard protects you from accidental destructive actions by intercepting dangerous commands before they execute. It uses Claude Code's PreToolUse hooks to catch risky patterns in real-time.
Guard protects you from accidental destructive actions by intercepting dangerous commands before they execute. It uses Claude Code's PreToolUse hooks to catch risky patterns in real-time.
Announce at start: "I'm activating Guard — destructive commands will be blocked until you explicitly approve them."
rm -rf / rm -r on important directoriesDROP TABLE / DROP DATABASE / TRUNCATEgit push --force / git push -f (to main/master)git reset --hardgit checkout . / git restore . (discard all changes)git clean -f / git clean -fdgit branch -D (force delete branch)kubectl delete (Kubernetes resource deletion)docker system prune / docker volume rm:> file / > file (truncate files)When the user specifies a directory to freeze to, Guard blocks edits outside that directory:
User: "Only edit files in src/api/"
→ Guard blocks Edit/Write calls to any path not under src/api/
Guard installs PreToolUse hooks that run BEFORE Claude executes Bash, Edit, or Write tools:
The hooks are defined in this skill's configuration and activate when the skill is loaded.
Just invoke /guard — destructive command blocking is immediate.
Tell Claude which directory to restrict edits to:
"Only edit files in packages/api/"
"Freeze edits to src/components/"
Guard will write the freeze path to .ultraship/guard-freeze.txt and enforce it on all Edit/Write operations.
"Unfreeze" or "Remove edit restrictions"
If Guard blocks something you actually need to run, explicitly confirm:
"Yes, I want to force-push to main"
"Confirmed: drop the users table"
Guard will allow explicitly confirmed destructive actions.
/investigate — Guard pairs well with investigation. No accidental fixes while diagnosing./deploy — Guard prevents accidental force-pushes during deployment./rescue — During incidents, Guard ensures rollback commands are deliberate.npx claudepluginhub houseofmvps/ultraship --plugin ultrashipBlocks destructive commands like rm -rf, git --force, DROP TABLE, docker prune, and restricts file edits to specified directories. Use on production systems and with autonomous agents.
Prevents destructive operations on production systems and autonomous agents by intercepting dangerous commands, restricting edits to a directory, or combining both protections.
Prevents destructive operations via three modes: cautious (warns on dangerous commands like rm -rf, git push --force, SQL drops), lockdown (restricts edits to one directory), and clear (removes restrictions). Uses PreToolUse hooks for Bash, Edit, and Write.