- agent-permissions-scanbyopen-coder-ai
Blocks: parses agent permission configs (.claude/settings*, .codex, .gemini, .vscode, .cursor/cli.json, opencode,…
- block-fetch-exec-in-filesbyopen-coder-ai
Warns (observe rollout) when a line added to a script, Dockerfile, Makefile, CI workflow or package.json wires a…
- dockerfile-compose-securitybyopen-coder-ai
Blocks (some rules ask) when a change to a Dockerfile, Containerfile or compose file adds: a base image with no tag,…
- lockfile-integritybyopen-coder-ai
Script gate (commit, agent write, CI) over npm, yarn, pnpm, bun, poetry, uv, Pipfile, Cargo, go.sum, Gemfile, composer…
- opaque-blob-guardbyopen-coder-ai
Warns (observe rollout; never refuses yet) when a change adds or edits, in tests/, fixtures/, testdata/, spec/, m4/,…
- package-lifecycle-scriptsbyopen-coder-ai
Blocks fetch-exec class hooks and asks about other new ones when a change adds or edits code that runs at install or…
- pin-github-actionsbyopen-coder-ai
Blocks uses: of an action/reusable workflow at a movable ref (not a lowercase 40-hex SHA) and a docker:// image without…
- registry-configbyopen-coder-ai
Refuses package-manager config that redirects installs or weakens them: literal tokens, http or unlisted registry hosts…
- verify-dependency-existsbyopen-coder-ai
Allowlist gate for new dependencies; no registry lookup. Reads Python, Node, Rust, Ruby, PHP, JVM, .NET, Go, Elixir,…
- verify-mcp-allowlistbyopen-coder-ai
Gates MCP servers against .chock/mcp-allowlist.json, empty by default (name, launcher with exact args, or url host).…
