---
title: "block-destructive-commands"
description: "Best-effort guard against destructive commands, read as parsed commands (bash -c and cd chains included, echo excluded): rm -rf on absolute, home ($HOME/~) or root-adjacent paths (and PowerShell Remove-Item -Recurse); gi"
canonical: https://agentpluginsdirectory.com/plugins/block-destructive-commands--open-coder-ai-7
last-updated: 2026-10-01
---

# block-destructive-commands
Best-effort guard against destructive commands, read as parsed commands (bash -c and cd chains included, echo excluded): rm -rf on absolute, home ($HOME/~) or root-adjacent paths (and PowerShell Remove-Item -Recurse); git push --force (not --force-with-lease), reset --hard, clean -f; kubectl delete; terraform destroy; aws s3 rm --recursive / rb --force; dropdb; helm uninstall/delete; docker volume rm/prune and system prune; gcloud... delete; find -delete / -exec rm; shred; truncate; wipefs -a. git branch -D asks first. Verbs are matched position-aware, so a bucket or object NAMED like a verb is allowed, and a relative path in the working tree stays allowed. sudo, doas and pkexec are transparent. A pre-push hook refuses any non-fast-forward push, force, +refspec or lease alike; a human escapes with git push --no-verify. Known bypasses: aliases, an unusual value-flag, interpreters and scripts. Friction, not a security boundary.
- Slug: block-destructive-commands--open-coder-ai-7
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai/chock
- Manifest: .agents/policies/block-destructive-commands/plugin.json
- Version: 0.1.0
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (block-destructive-commands)
- MCP servers: 0
- Stars: 8
- Repository created: 2026-08-17
- Repository last pushed: 2026-10-01
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/block-destructive-commands--open-coder-ai-7
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## Skills

- block-destructive-commands: Best-effort guard against destructive commands, read as parsed commands (bash -c and cd chains included, echo excluded): rm -rf on absolute, home ($HOME/~) or root-adjacent paths (and PowerShell Remove-Item -Recurse); git push --force (not --force-with-lease), reset --hard, clean -f; kubectl delete…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.