- git-subtreesbysystemfsoftware
Blocks unsafe git subtree invocations: URL fetch, missing --squash, missing -S/--gpg-sign, and subtree push.
- oxlint-guardbysystemfsoftware
Lints every agent edit with oxlint (PostToolUse) and blocks edits that weaken the oxlint config (PreToolUse).