Show HN: Crushout – A PreToolUse Bash hook that auto-approves read-only commands

Category: security

Tags: bash, security, ai-agents

Score: 6.5/10 (Innovation: 6, Technical: 7, Documentation: 7, Utility: 6)

Crushout is a PreToolUse hook that uses tree-sitter to parse bash commands and auto-approve read-only operations while blocking dangerous ones, integrating with AI coding tools like Crush and Claude Code. It is interesting because it offers a configurable, recursive rule system and path tracking to safely accelerate agent workflows without compromising security.

Target audience: backend devs, devops

Repository: https://github.com/arnarg/crushout · Go · MIT

View on Hacker News