V2 is a ground-up rebuild: one installer for twelve coding CLIs, secret protection, a policy GUI, and a rebuilt evaluation engine with decision tracing.
Upgrading from v1? One command upgrades every installed integration:
npx -y cc-safety-net@latest update. If you defined custom rules under v1, see
Upgrading from an older version.
Renamed: safety-net → cc-safety-net
The plugin, npm package, and CLI are now uniformly named cc-safety-net. Claude Code marketplace installs migrate automatically; no action is needed.
Highlights
- Universal installer — interactive
install/uninstall/updateacross all twelve supported agent CLIs (Claude Code, Codex, Cursor, Gemini CLI, Copilot CLI, OpenCode, Amp, Pi, and more). - Secret protection — built-in rules block access to SSH keys,
.envfiles, cloud credentials, and coding-CLI credential stores, across shell commands and file tools. - Rebuilt evaluation engine — canonical command IR, immutable policy snapshots, and an ordered guard pipeline with decision tracing via
explain. - Always-on catastrophic protections — recursive deletion of root or home, Git metadata mutation, and policy-file tampering are blocked in every mode.
- Safety presets —
standard/strict/paranoidwith per-rule overrides, trusted delete allow-paths, and env vars that can only raise protection. - Policy GUI —
cc-safety-net guiserves a local, token-authenticated policy editor with live preset preview. - Audit trail — allowed and blocked decisions logged to local per-project JSONL with secret redaction; browse with
cc-safety-net logs. - Documented threat model — the SECURITY.md mode contract, explicit resource limits, and a residual-risk registry.
Get started
npx -y cc-safety-net@latest installFull documentation: https://ccsafetynet.com/docs
Full changelog: v1.0.6...v2.0.0