Unverified50% confidenceFactExact time
In Clawed Code, the RepoGates plugin mounts a hook on the bash tool, reads the exact line before the command runs, and refuses execution if the clone or install points to a blocked repository.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/25/2026
First Seen
Valid until: 1/23/2027
Sources
Related Entities
Related Claims
UnverifiedThe validator outright rejects | sh, | bash, xargs, eval, and redirections like > / and >>, excluding executing pipes entirely from the first commands in runbooks.69% similarUnverifiedIf the command does not take effect after configuring the environment variable, it may be due to caching, and restarting the computer can resolve the issue.69% similarUnverifiedThe validator allows specific binaries and subcommands, outright rejects write operation verbs, rejects pipes to a shell, and fails closed on anything it does not recognize.66% similarUnverifiedThe shell redirection operator `>` creates or truncates the target file before the command runs, so when the command fails the output file may still exist but contain empty content or an error message.62% similarUnverifiedBefore the fix, recursive deletion commands like rm -rf "$(pwd)" whose targets came solely from command substitution output would execute silently without prompting in auto mode and --dangerously-skip-permissions mode; after the fix, the user will be actively asked even if a Bash allow rule exists, unless CLAUDE_CODE_DISABLE_SUBSTITUTION_RM_PROMPT=1 is set.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1096389API
curl https://kongchang.com/api/v1/knowledge/claims/1096389MCP
get_claim(id=1096389)