# Full Safety Guard

Warns on destructive commands and limits edits to one directory.

- Repository: https://github.com/garrytan/gstack (138584 stars)
- Category: Security
- License: MIT
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add garrytan/gstack --skill guard -g -a claude-code -y`
Codex: `npx skills add garrytan/gstack --skill guard -g -a codex -y`
Cursor: `npx skills add garrytan/gstack --skill guard -g -a cursor -y`
Gemini CLI: `npx skills add garrytan/gstack --skill guard -g -a gemini-cli -y`

## Description

Full safety mode: destructive command warnings + directory-scoped edits. (gstack)

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

<!-- AUTO-GENERATED from SKILL.md.tmpl, do not edit directly -->
<!-- Regenerate: bun run gen:skill-docs -->

# /guard, Full Safety Mode

Activates both destructive command warnings and directory-scoped edit restrictions.
This is the combination of `/careful` + `/freeze` in a single command.

**Dependency note:** This skill references hook scripts from the sibling `/careful`
and `/freeze` skill directories. Both must be installed (they are installed together
by the gstack setup script).

```bash
GSTACK_STATE_ROOT=$(~/.claude/skills/gstack/bin/gstack-paths --get GSTACK_STATE_ROOT); : "${GSTACK_STATE_ROOT:?gstack-paths failed; reinstall with ./setup or /gstack-upgrade}"
mkdir -p "$GSTACK_STATE_ROOT"/analytics
echo '{"skill":"guard","ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","repo":"'$(basename "$(git rev-parse --show-toplevel 2>/dev/null)" 2>/dev/null || echo "unknown")'"}'  >> "$GSTACK_STATE_ROOT"/analytics/skill-usage.jsonl 2>/dev/null || true
```

## Setup

Ask the user which directory to restrict edits to. Use AskUserQuestion:

- Question: "Guard mode: which directory should edits be restricted to? Destructive command warnings are always on. Files outside the chosen path will be blocked from editing."
- Text input (not multiple choice), the user types a path.

Once the user provides a directory path:

Set the user-selected boundary with the shared writer, which resolves a physical absolute path and serializes replacement with investigation cleanup:
```bash
bash "$HOME/.claude/skills/gstack/freeze/bin/freeze-state.sh" set "<user-provided-path>"
```

On helper failure, do not claim the boundary is active. Preserve the state and report recovery; never bypass the shared writer with a direct write or deletion.

The rest: https://github.com/garrytan/gstack/blob/HEAD/guard/SKILL.md