Open-source guardrail

Inserting suppressions or test skips with sed or perl

AgentTrail Guard lets this run by default, and writes the match to its local decision log so you can see how often it happens.

Default action
Warn
Severity
Medium severity
Library version
0.2.1Sep 29, 2026

What it catches, and what it misses

Written into the rule itself, next to what it matches, so you can judge it before you trust it.

Warns on an in-place sed or perl edit whose script contains a suppression or skip marker: @ts-ignore, @ts-expect-error, @ts-nocheck, eslint-disable, # type: ignore, # noqa, # pragma: no cover, it.skip / test.skip / describe.skip, xit / xdescribe / xtest, @pytest.mark.skip, Rust's #[ignore] and Go's t.Skip. One such command can silence a type error, a lint rule or a failing test across many files at once. It matches the in-place flag (-i, -i.bak, -Ei, --in-place, perl -pi) followed by a script naming a marker. It cannot parse the script, so it does not tell a replacement that inserts a marker from one that removes it, except the /…/d delete-line form, which is deliberately NOT matched; neither are sed -n and perl -ne, which only print. Misses a marker added with a file tool — the Edit tool carries no content — an in-place flag written after the script, and a marker assembled from pieces. Over-matches perl -I<dir>, which the case-insensitive match reads as -i. A quoted MENTION is not a use: a search, a git commit -m message, an echo or a curl --data body that only names this command is left alone. That holds only while every shell metacharacter stays inside the quotes, so git commit -m "x" && … is still caught; and the carrier must be the first word, so sudo grep … is not exempt.

Tested on every build

The rule must match every command on the left and none on the right, or the library does not build. Catching the real thing is easy; staying quiet on the near-miss is the hard part.

Catches (8)

  • sed -i 's/^describe(/describe.skip(/' src/parser.test.ts
  • sed -i '1i // @ts-nocheck' src/legacy.ts
  • sed -i 's/$/ # noqa/' app/views.py
  • sed -i '' 's|^import|// eslint-disable-next-line import|' src/index.ts
  • sed -Ei '/^def test_/i @pytest.mark.skip' tests/test_api.py
  • sed -i 's/#[[]test[]]/#[test] #[ignore]/' src/lib.rs
  • perl -pi -e 's/ it[(]/ it.skip(/g' test/api.test.js
  • perl -i -pe 's/$/ # type: ignore/' src/models.py

Stays quiet on (10)

  • git commit -m "docs: explain sed -i s/^describe(/describe.skip(/ src/parser.test.ts"
  • grep -rn "sed -i s/^describe(/describe.skip(/ src/parser.test.ts" docs/
  • echo "never run sed -i s/^describe(/describe.skip(/ src/parser.test.ts"
  • curl --data "we ran sed -i s/^describe(/describe.skip(/ src/parser.test.ts" https://api.example.com/comments
  • sed -i 's/foo/bar/g' src/index.ts
  • sed -n '/@ts-ignore/p' src/index.ts
  • sed -i '/@ts-ignore/d' src/index.ts
  • perl -ne 'print if /noqa/' app/views.py
  • sed -i 's/process.exit(1)/process.exit(0)/' bin/cli.js
  • sed -i 's/timeout: 5000/timeout: 10000/' vitest.config.ts

What "warn" means in each app

The guard runs as a hook in each app, and each app gives a hook different powers. Here is what this rule's default action does in each one.

Claude Code
The call runs, and the match is written to the local decision log.
Cursor
The call runs, and Cursor shows nothing. The match is still written to the decision log.
Codex CLI
The call runs. Codex's terminal UI shows a hook line (a codex exec run shows nothing), and the match is written to the decision log.

Each app hands the guard a different set of calls: in a Cursor sandbox run mode, for one, some terminal commands run without reaching the guard at all. Read the notes for Cursor and for Codex CLI before you rely on a rule there.

Change what it does in one command

Turn it off, change its action, or silence it on one command shape. The narrow one is allow: the rule keeps catching everything else.

agenttrail-guard
$agenttrail-guard guardrails show ti.inline-suppress-bulk# everything about it
$agenttrail-guard guardrails set-action ti.inline-suppress-bulk ask# block, ask or warn
$agenttrail-guard guardrails allow ti.inline-suppress-bulk '<pattern>'# silence one shape
$agenttrail-guard guardrails disable ti.inline-suppress-bulk# turn it off

Put these guardrails in front of your agent.

AgentTrail Guard is free and open source. It checks every command and file change against the whole library before your agent runs it, on your machine, with no account.

bash
$npm i -g @agenttrail/guard
Read the source on GitHub