Dicklesworthstone/destructive_command_guard

Based on the README, here's a technical summary: Implements a three-tier hook architecture with SIMD-accelerated regex filtering and AST-based heredoc scanning to detect destructive patterns in command arguments, inline scripts, and environment variables with sub-millisecond latency. Integrates directly with Claude Code, Copilot CLI, Gemini CLI, and Aider through native hook protocols, while offering 49+ modular security packs covering databases (PostgreSQL, MySQL), container platforms (Docker, Kubernetes), and cloud providers (AWS, GCP, Azure). Employs fail-open design with agent-specific trust profiles and dual regex engines to balance protection against accidental workflow breakage.

670 stars. Actively maintained with 41 commits in the last 30 days.