scope-guard

Restrict agent file modifications to defined paths with approval checkpoints.

42|9|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/drvoss/everything-copilot-cli --skill scope-guard-drvoss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: scope-guard
Source: https://github.com/drvoss/everything-copilot-cli/tree/main/skills/copilot-exclusive/scope-guard
Command: npx skills add https://github.com/drvoss/everything-copilot-cli --skill scope-guard-drvoss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Developers often need to limit AI-driven changes to a specific set of files or directories and prevent accidental execution of destructive commands, especially in high‑risk or parallel‑agent scenarios.

Core Features & Use Cases

  • Define Writable Surface – Explicitly state the exact paths or file list the agent may modify.
  • Mode Selection – Choose between Careful (warn on risky commands), Freeze (restrict edits to defined paths), or Guard (combine both) to match the task’s safety requirements.
  • Plan‑Mode Checkpoint – Insert an approval step before any high‑impact operation.
  • Agent Re‑briefing – Restate scope for each delegated or parallel agent to ensure isolation.
  • Explicit Removal – Clear the scope when the restriction is no longer needed.

Typical use cases include production migrations, billing module refactors, or any situation where multiple agents work on separate parts of a codebase and need strict boundaries.

Quick Start

Set a Guard mode scope for src/payments/ and require approval before any destructive command.

Frequently Asked Questions about scope-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I restrict AI code changes to specific file paths?▼

To prevent destructive commands during code migrations, use a guardrail mode that combines path freezing with risky command warnings. This requires explicit approval before executing any high-impact operations, ensuring safe migrations.

How do I isolate work when running parallel agents on a codebase?▼

To isolate work when running parallel agents on a codebase, re-brief each delegated agent with a specific path scope. This explicit path ownership prevents overlapping edits and maintains strict boundaries between concurrent tasks.

What is the best way to add approval checkpoints before risky code operations?▼

The best way to add approval checkpoints before risky code operations is to enable plan-mode checkpoints. This inserts an explicit approval step before any high-impact operation, halting execution until authorized.

Can I clear file scope restrictions after a risky refactoring task is complete?▼

Yes, you can clear file scope restrictions after a risky refactoring task is complete through explicit removal. This removes the defined writable surface and mode-based guardrails, restoring standard agent permissions.

Does plan-mode work without relying on external scripts for guardrails?▼

Yes, plan-mode works without relying on external scripts for guardrails. It enforces mode-based restrictions and explicit path ownership directly through the skill's internal logic, satisfying safety requirements natively.