OpenViSTAI · Agents · Blockchain · Crypto
Menu
Agent Security & Sandboxing

Destructive Command Guard

Destructive Command Guard (dcg) is a Rust command-line tool that hooks into AI coding agents to inspect and block destructive Git and shell commands before execution.

Independent OpenViST project profile, based on linked sources.

Destructive Command Guard — OpenViST project profile in Agent Security & Sandboxing.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use dcg when an AI coding agent can run commands in a repository and you want an additional pre-execution check against accidental destructive operations.

Who it is for

  • Developers using AI coding agents that can run Git or shell commands.
  • Teams seeking a command-checking hook for supported coding-agent integrations.
  • Maintainers who want to scan commands in CI or pre-commit workflows.

Documented uses

  • Intercept an agent's shell or Git command before it runs.
  • Block commands identified as destructive and show a reason with safer suggestions.
  • Configure a command guard for a supported coding assistant.
  • Scan for dangerous commands in CI or pre-commit workflows.
Before you choose

Requirements & limits

The project documents prebuilt-binary installation through shell and PowerShell installers, Homebrew, and manual release archives. The shell installer is described for Linux, macOS and Windows via WSL; a separate installer is provided for native Windows.

  • Integration depth varies: Aider is documented as limited to Git hooks, while Continue is described as detection only.
  • Codex CLI integration requires version 0.125.0 or later.
  • Homebrew installs the binary only; run dcg install separately to configure detected agent hooks.
  • The tool supports layered configuration and built-in security packs, including packs for databases, containers, cloud services and infrastructure tools.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Install dcg with Homebrew and configure agent hooks

Install the dcg binary through Homebrew, then run its documented hook configuration step.

Before you start

  • Homebrew
  • A supported coding agent detected on the machine

Steps

  1. Install the formula with brew install dicklesworthstone/tap/dcg.

  2. Run dcg install to configure hooks for detected coding agents.

Expected outcome

The dcg binary is installed and the explicit install command configures hooks for detected agents.

Guide limitations

  • The Homebrew formula installs only the binary; it does not configure hooks by itself.
  • Hook support and setup depend on the detected agent.
COMPARE OPTIONS

Compare options for AI coding assistance

These projects document a common task and share a project role. This is a source-based comparison, not an execution benchmark or a guarantee of interchangeability.

ProjectDocumented purposePlatformAccess and requirements
Destructive Command GuardIntercept an agent's shell or Git command before it runs.CLIThe project documents prebuilt-binary installation through shell and PowerShell installers, Homebrew, and manual release archives. The shell installer is described for Linux, macOS and Windows via WSL; a separate installer is provided for native Windows.
Cc Safety NetIntercept risky shell and filesystem actions before an agent's tool call runs.CLIThe quick start requires Node.js 18 or higher and installs into coding CLIs on the current machine. The repository displays an MIT license.
Agent SafehouseRun a coding agent with access limited to files and integrations it needs.CLI, macOS, Self-hostedThe project documents installation through Homebrew or a standalone shell script. It is open source under the Apache-2.0 license.
Evidence and transparency

Sources & review

Source record details
Source availability
Active
Sources checked
15 October 2026
Original website title
Dicklesworthstone/destructive_command_guard · Official homepage title · retained in its source language