CC Safe Setup

cc-safe-setup
日本語の README はこちら / Japanese README

One command to add safety hooks to Claude Code. It installs a set of PreToolUse, PostToolUse, SessionStart, Stop, and SubagentStop hooks that stop destructive or irreversible operations *before* they run, and that surface silent failures.

The command is interactive: it shows what each hook does and lets you choose which to install into your ~/.claude/settings.json (or a project-local .claude/settings.json). Nothing is installed without your confirmation. MIT licensed.
npx cc-safe-setup is current again. The npm release sat at 29.8.0 (2026-04-20) for five months because publishing was blocked on a credential; 30.0.5 was published on 2026-09-24 and latest points at it. Either install command now gives you the same guards. If you installed from npm before that date you have 29.8.0, which lets twenty-five command shapes through that the current code blocks — the measurement, and how to check what you have, are in The npm release was behind this repository below.

Reading this in order, rather than by section: The Claude Code Safety Field Manual is this repository's documentation laid out as a path — the pre-flight checklist, what each guard actually refuses, how to make one fire on purpose so you can watch it work, and what to read in the log afterwards. The minimum price is zero.

Something already broken? Start here

If you arrived from a search with something already broken, start here: the symptom on the
left, and the section that answers it on the right. Every section it points to is a
measurement on a real machine, not a guess. (A third of the visitors here do arrive from a
search engine — 51 of 152 unique visitors in the 14 days to 2026-09-19. The rest come from
links such as a gist or GitHub itself, or with no…