From damage-control
This skill should be used when the user asks to "install damage control", "setup security hooks", "deploy damage control", "add protection", "block dangerous commands", "protect sensitive files", "test damage control", "verify hooks", "安裝 damage control", "設定安全鉤子", "部署損害控制", "新增保護", "封鎖危險指令", "保護敏感檔案", "測試 damage control", "驗證鉤子", or mentions damage control, security hooks (安全鉤子), protected paths (受保護路徑), blocked commands (封鎖指令), zero access paths (零存取路徑), read only paths (唯讀路徑), install security (安裝安全功能), modify protection (修改保護設定).
How this skill is triggered — by the user, by Claude, or both
Slash command
/damage-control:damage-controlThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
為 Claude Code 提供深度防禦 (defense-in-depth) 保護系統。透過 PreToolUse 鉤子 (hooks) 封鎖危險指令並保護敏感檔案。
cookbook/build_for_windows.mdcookbook/install_damage_control_ag_workflow.mdcookbook/list_damage_controls.mdcookbook/manual_control_damage_control_ag_workflow.mdcookbook/modify_damage_control_ag_workflow.mdcookbook/test_damage_control.mdhooks/damage-control-python/bash-tool-damage-control.pyhooks/damage-control-python/edit-tool-damage-control.pyhooks/damage-control-python/python-settings.jsonhooks/damage-control-python/test-damage-control.pyhooks/damage-control-python/write-tool-damage-control.pyhooks/damage-control-typescript/bash-tool-damage-control.tshooks/damage-control-typescript/edit-tool-damage-control.tshooks/damage-control-typescript/test-damage-control.tshooks/damage-control-typescript/typescript-settings.jsonhooks/damage-control-typescript/write-tool-damage-control.tspatterns.yamltest-prompts/README.mdtest-prompts/sentient.mdtest-prompts/sentient_v1.md為 Claude Code 提供深度防禦 (defense-in-depth) 保護系統。透過 PreToolUse 鉤子 (hooks) 封鎖危險指令並保護敏感檔案。
此技能協助使用者部署和管理損害控制 (Damage Control) 安全系統,提供以下功能:
ask: true)zeroAccessPaths - 零存取路徑:完全禁止存取(用於密鑰/憑證)readOnlyPaths - 唯讀路徑:允許讀取,封鎖修改noDeletePaths - 禁止刪除路徑:允許所有操作,但禁止刪除.claude/skills/damage-control/
├── SKILL.md # 此檔案
├── patterns.yaml # 共用安全模式(單一事實來源)
├── cookbook/
│ ├── install_damage_control_ag_workflow.md
│ ├── modify_damage_control_ag_workflow.md
│ ├── manual_control_damage_control_ag_workflow.md
│ ├── list_damage_controls.md
│ ├── test_damage_control.md
│ └── build_for_windows.md
├── hooks/
│ ├── damage-control-python/ # Python/UV 實作
│ │ ├── bash-tool-damage-control.py
│ │ ├── edit-tool-damage-control.py
│ │ ├── write-tool-damage-control.py
│ │ ├── python-settings.json
│ │ └── test-damage-control.py
│ └── damage-control-typescript/ # Bun/TypeScript 實作
│ ├── bash-tool-damage-control.ts
│ ├── edit-tool-damage-control.ts
│ ├── write-tool-damage-control.ts
│ ├── typescript-settings.json
│ └── test-damage-control.ts
└── test-prompts/ # 驗證用測試提示
├── sentient_v1.md
├── sentient_v2.md
├── sentient_v3.md
└── sentient_v4.md
安裝工作流程會根據選擇的等級複製鉤子 (hooks) 並建立設定:
~/.claude/
├── settings.json # 鉤子設定
└── hooks/
└── damage-control/
├── patterns.yaml
├── bash-tool-damage-control.py(或 .ts)
├── edit-tool-damage-control.py
└── write-tool-damage-control.py
<代理程式目前工作目錄>/
└── .claude/
├── settings.json # 鉤子設定(共用)
└── hooks/
└── damage-control/
├── patterns.yaml
├── bash-tool-damage-control.py(或 .ts)
├── edit-tool-damage-control.py
└── write-tool-damage-control.py
<代理程式目前工作目錄>/
└── .claude/
├── settings.local.json # 個人覆寫設定(已加入 gitignore)
└── hooks/
└── damage-control/
├── patterns.yaml
├── bash-tool-damage-control.py(或 .ts)
├── edit-tool-damage-control.py
└── write-tool-damage-control.py
本節定義處理使用者請求的決策樹。根據使用者所說的內容,讀取並執行適當的工作流程提示。
觸發語句:「install damage control」、「setup security hooks」、「deploy damage control」、「add protection」
工作流程:讀取並執行 cookbook/install_damage_control_ag_workflow.md
觸發語句:「help me modify damage control」、「update protection」、「change blocked paths」、「add restricted directory」
工作流程:讀取並執行 cookbook/modify_damage_control_ag_workflow.md
觸發語句:「how do I manually update」、「explain damage control config」、「show me the settings」
工作流程:讀取並執行 cookbook/manual_control_damage_control_ag_workflow.md
觸發語句: - 「test damage control」 - 「run damage control tests」 - 「verify hooks are working」 - 「damage control test this command 」 - 「damage control test this read to this path 」 - 「damage control test this write to this path 」 - 「damage control test this delete to this path 」 - 「damage control test this run this command 」
工作流程:讀取並執行 cookbook/test_damage_control.md
功能說明:
觸發語句:「build for windows」、「add windows patterns」、「convert to windows」、「windows damage control」
工作流程:讀取並執行 cookbook/build_for_windows.md
功能說明:
觸發語句:「update global read only paths to include X」、「add /secret to zero access paths」、「block command Y」
動作:直接執行,無需提示 — 使用者已熟悉系統。
範例:
| 等級 | 路徑 | 範圍 |
|---|---|---|
| 全域 (Global) | ~/.claude/settings.json | 所有專案 |
| 專案 (Project) | .claude/settings.json | 目前專案(共用) |
| 專案個人 (Project Personal) | .claude/settings.local.json | 目前專案(個人) |
| 類型 | 讀取 | 寫入 | 編輯 | 刪除 | 使用情境 |
|---|---|---|---|---|---|
zeroAccessPaths | 否 | 否 | 否 | 否 | 密鑰、憑證 |
readOnlyPaths | 是 | 否 | 否 | 否 | 系統設定檔、歷史記錄 |
noDeletePaths | 是 | 是 | 是 | 否 | 重要專案檔案 |
| 實作 | 執行環境 | 安裝指令 |
|---|---|---|
| Python | UV (Astral) | curl -LsSf https://astral.sh/uv/install.sh | sh |
| TypeScript | Bun | curl -fsSL https://bun.sh/install | bash && bun add yaml |
| 代碼 | 意義 |
|---|---|
| 0 | 允許操作 |
| 0 | 詢問(JSON 輸出觸發對話框) |
| 2 | 封鎖操作 |
使用 test-prompts/ 中的測試提示來驗證鉤子:
sentient_v1.md - 測試 rm -rf 封鎖(bashToolPatterns)sentient_v2.md - 測試 find -delete 封鎖(noDeletePaths)sentient_v3.md - 測試詢問模式(帶 ID 的 SQL DELETE)sentient_v4.md - 測試簡單指令封鎖執行測試:
/project:test-prompts/sentient_v1
npx claudepluginhub rdcrystallab/agentic-plugins --plugin damage-controlBlocks destructive Bash commands like rm -rf, DROP TABLE, git force-push, reset --hard, and restricts file edits to a specific directory. Use for protection on critical systems.
Prevents destructive operations on production systems and autonomous agents by intercepting dangerous commands, restricting edits to a directory, or combining both protections.