futpib / claudex / 22673371450

64%

push

github

Add ban-write-operations rule to block unconfirmed write actions

Introduces a new hook rule that detects write operations (HTTP
POST/PUT/PATCH/DELETE, GraphQL data modifications, MCP write tools) and
nudges Claude Code to seek explicit user approval before proceeding.

Covers gh/glab API calls, curl, wget, httpie, and any MCP tool whose
name contains write-action words (tokenized across camelCase, snake_case,
and kebab-case boundaries). Includes a generic fallback that catches
unknown commands with write-like flags. Uses the bash parser AST for
reliable command analysis.

Co-authored-by: Claude <noreply@anthropic.com>

946 of 1225 branches covered (77.22%)

Branch coverage included in aggregate %.

4296 of 6778 relevant lines covered (63.38%)

274.62 hits per line