safe-chains 0.196.0

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72

[[command]]
name = "conda"
description = "Cross-platform package and environment manager for Python and data science. conda list and conda info are read-only queries that inspect locally installed packages and environment metadata. conda config with --show or --show-sources is a read-only view of the configuration; other config operations can modify settings. The hidden `shell.<shell> hook` subcommand prints shell init code that wires conda's activate/deactivate functions into the shell (canonical: `eval \"$(conda shell.bash hook)\"`); it is what `conda init` writes into the user's shell rc. None of these subcommands install or remove packages. list may read the lockfile and environment directories. Mature, stable project maintained by Anaconda, Inc."
url = "https://docs.conda.io/projects/conda/en/stable/commands/index.html"
researched_version = "26.5.2 (2026-06-01)"
bare_flags = ["--help", "--version", "-V", "-h"]
examples_safe = [
    "conda list",
    "conda info",
    "eval \"$(conda shell.bash hook)\"",
    "eval \"$(conda shell.zsh hook)\"",
    "eval \"$(conda shell.fish hook)\"",
]
examples_denied = [
    "eval \"$(conda shell.bash activate myenv)\"",
    "eval \"$(conda shell.bash hook --dev)\"",
    "eval \"$(conda shell.bash)\"",
    "eval \"$(conda list)\"",
]

[[command.sub]]
name = "list"
standalone = [
    "--explicit", "--export", "--full-name", "--help", "--json",
    "--no-pip", "--revisions",
    "-e", "-f", "-h",
]
valued = ["--name", "--prefix", "-n", "-p"]

[[command.sub]]
name = "info"
standalone = [
    "--all", "--envs", "--help", "--json", "--verbose",
    "-a", "-e", "-h", "-v",
]

[[command.sub]]
name = "config"
bare = false
require_any = ["--show", "--show-sources"]
standalone = [
    "--help", "--json", "--quiet", "--show", "--show-sources", "--verbose",
    "-h", "-q", "-v",
]
valued = ["--env", "--file", "--name", "--prefix", "-f", "-n", "-p"]

[[command.sub]]
name = "shell.bash"
nested_bare = false
[[command.sub.sub]]
name = "hook"
level = "Inert"
max_positional = 0
eval_safe = true

[[command.sub]]
name = "shell.zsh"
nested_bare = false
[[command.sub.sub]]
name = "hook"
level = "Inert"
max_positional = 0
eval_safe = true

[[command.sub]]
name = "shell.fish"
nested_bare = false
[[command.sub.sub]]
name = "hook"
level = "Inert"
max_positional = 0
eval_safe = true