Guardrails that stop an agent before it pushes to main

Coding agents run shell commands. Build a shell shim that sits between an agent and the terminal, blocks the dangerous ones, and asks a human for the borderline ones.

Requirements

A wrapper the agent is pointed at instead of bash; every command passes through it

A rule file (YAML or JSON) of deny patterns, allow patterns and "ask" patterns

Deny by default for: pushes to protected branches, rm -rf outside the repo, anything touching ~/.ssh or .env

"Ask" opens a local prompt with the command and a 60-second timeout that defaults to deny

An append-only audit log of every command, its verdict and who decided

Bonus Points

A dry-run mode that shows what a transcript of agent commands would have been blocked

agentssecurityclishell

Intermediate

View on GitHub

GoShip's MCP server tracks how you interact with AI — not your code. Connect it to get scored and improve your workflow.

Discussion (0)

No comments yet

Be the first to share your thoughts on this challenge.