0xM3R/secure-claude-config

{
  "permissions": {
    "deny": [
      "Bash(rm -rf *)",
      "Bash(rm -fr *)",
      "Bash(rm -Rf *)",
      "Bash(rm -fR *)",
      "Bash(sudo *)",
      "Bash(mkfs *)",
      "Bash(dd if=*)",
      "Bash(shred *)",
      "Bash(wget *|bash*)",
      "Bash(wget *| bash*)",
      "Bash(wget *|sh*)",
      "Bash(wget *| sh*)",
      "Bash(curl *|bash*)",
      "Bash(curl *| bash*)",
      "Bash(curl *|sh*)",
      "Bash(curl *| sh*)",
      "Bash(curl *|zsh*)",
      "Bash(curl *| zsh*)",
      "Bash(nc *)",
      "Bash(ncat *)",
      "Bash(netcat *)",
      "Bash(eval *)",
      "Bash(crontab *)",
      "Bash(chmod +s *)",
      "Bash(chmod 777 *)",
      "Bash(chown root*)",
      "Bash(git push --force*)",
      "Bash(git push *--force*)",
      "Bash(git reset --hard*)",
      "Bash(history -c*)",
      "Bash(unset HISTFILE*)",
      "Edit(~/.bashrc)",
      "Edit(~/.zshrc)",
      "Edit(~/.profile)",
      "Edit(~/.bash_profile)",
      "Edit(~/.zprofile)",
      "Edit(~/.ssh/**)",
      "Edit(~/.gnupg/**)",
      "Read(~/.ssh/**)",
      "Read(~/.gnupg/**)",
      "Read(~/.aws/**)",
      "Read(~/.azure/**)",
      "Read(~/.config/gh/**)",
      "Read(~/.config/gcloud/**)",
      "Read(~/.config/op/**)",
      "Read(~/.git-credentials)",
      "Read(~/.netrc)",
      "Read(~/.vault-token)",
      "Read(~/.docker/config.json)",
      "Read(~/.kube/**)",
      "Read(~/.npmrc)",
      "Read(~/.npm/**)",
      "Read(~/.pypirc)",
      "Read(~/.gem/credentials)",
      "Read(~/.terraform.d/**)",
      "Read(~/Library/Keychains/**)",
      "Read(~/Library/Application Support/**/metamask*/**)",
      "Read(~/Library/Application Support/**/electrum*/**)",
      "Read(~/Library/Application Support/**/exodus*/**)",
      "Read(~/Library/Application Support/**/phantom*/**)",
      "Read(~/Library/Application Support/**/solflare*/**)",
      "Read(~/Library/Application Support/**/frame*/**)",
      "Read(~/Library/Application Support/**/rainbow*/**)",
      "Read(~/Library/Application Support/**/ledger*/**)",
      "Read(~/Library/Application Support/**/trezor*/**)",
      "Read(~/Library/Application Support/**/1password*/**)",
      "Read(~/Library/Application Support/**/bitwarden*/**)",
      "Read(~/Library/Application Support/**/keybase*/**)"
    ]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "CMD=$(jq -r '.tool_input.command'); if echo \"$CMD\" | grep -qiE '(^|;[[:space:]]*|&&[[:space:]]*|[|][|][[:space:]]*|[|][[:space:]]*)rm[[:space:]]' && echo \"$CMD\" | grep -qiE '(^|[[:space:]])-[a-zA-Z]*[rR]|--recursive' && echo \"$CMD\" | grep -"
          },
          {
            "type": "command",
            "command": "CMD=$(jq -r '.tool_input.command'); if echo \"$CMD\" | grep -qE 'git[[:space:]]+push.*(main|master)'; then echo 'BLOCKED: Use feature branches, not direct push to main' >&2; exit 2; fi"
          },
          {
            "type": "command",
            "command": "CMD=$(jq -r '.tool_input.command'); if echo \"$CMD\" | grep -qiE '(curl|wget|fetch)[[:space:]].*[|][[:space:]]*(bash|sh|zsh|ksh|fish|python[0-9.]?|node|perl|ruby)'; then echo 'BLOCKED: pipe-to-shell download pattern detected' >&2; exit 2; fi"
          },
          {
            "type": "command",
            "command": "CMD=$(jq -r '.tool_input.command'); if echo \"$CMD\" | grep -qiE 'base64[[:space:]]+(--decode|-d)[[:space:]]*[|]|[|][[:space:]]*base64[[:space:]]+(--decode|-d).*[|]'; then echo 'BLOCKED: base64-decode-pipe pattern detected' >&2; exit 2; fi"
          },
          {
            "type": "command",
            "command": "CMD=$(jq -r '.tool_input.command'); if echo \"$CMD\" | grep -qiE '(unset[[:space:]]+HISTFILE|history[[:space:]]+-[cw]|export[[:space:]]+HISTFILE=/dev/null)'; then echo 'BLOCKED: history-suppression pattern detected' >&2; exit 2; fi"
          }
        ]
      }
    ]
  }
}