skill-safe-commands

# Safe Commands Protocol This skill defines **all commands that are SAFE TO AUTO-RUN** without user approval. > [!IMPORTANT] > **This is the single source of truth for Safe Commands.** > All other skills and prompts should reference this skill instead of duplicating the list. ## Auto-Run Command Categories | Category | Commands | Reason | |----------|----------|--------| | **Read-only** | `ls`, `cat`, `head`, `tail`, `find`, `grep`, `rg`, `fd`, `tree`, `wc`, `echo` | Do not modify state | | **Symlink-aware** | `find -L`, `ls -L`, `rg --follow` / `rg -L`, `fd -L` | Read-only, but follow symlinks into framework dirs (`.agent/`, `.agents/`, `.cursor/skills/`, `System/`, `.agentic-development/`). Plain `find`/`ls`/`rg` do **not** descend into symlinked directories | | **File info** | `stat`, `file`, `du`, `df` | Informational only | | **Git read** | `git status`, `git log`, `git diff`, `git show`, `git branch`, `git remote`, `git tag` | Read-only git operations | | **Archiving** | `mv docs/TASK.md docs/tasks/...`, `mv docs/PLAN.md docs/plans/...` | Documented, non-destructive moves (TASK/PLAN rotate in lockstep) | | **Directory** | `mkdir -p docs/tasks`, `mkdir -p docs/plans`, `mkdir -p docs/architectures`, `mkdir -p .agent/skills/*` | Idempotent operations | | **Tool calls** | `generate_task_archive_filename`, `list_directory`, `read_file` | Native tools | | **Framework scripts** | `python3 .agent/skills/skill-session-state/scripts/update_state.py`, `python3 .agent/tools/tas...