{"slug": "antelog-stops-ai-coding-agents-from-running-dangerous-commands", "title": "Antelog – stops AI coding agents from running dangerous commands", "summary": "Antelog launched a runtime security tool that intercepts commands AI coding agents such as Claude Code and Cursor attempt to run, logging each command and blocking dangerous ones before execution, with a fail-closed design that blocks the action if Antelog itself fails. The tool ships with 19 built-in safety rules, adds under 50ms per check, runs locally with only unknown commands sent to a cloud AI check, and installs in about one minute via a shell script from the YashSarwaiya/antelog-releases GitHub repository. Antelog is free with 1,000 AI checks a month per machine and 14-day online history, while Pro costs $25 a month or $199 a year for 10,000 checks and 90-day history, and custom Team/Enterprise plans add shared rules, audit logs and single sign-on.", "body_md": "Runtime security for AI agents\n\n# Stop AI agents *before* they break things.\n\nAntelog checks every command your AI agent wants to run and stops the dangerous ones before they run.Free · Runs locally\n\nHow it works\n\n## Every action is checked *first.*\n\nYour AI agent\n\nClaude Code or Cursor wants to run a command.\n\nantelog\n\n1. 01Log it Saves the command before anything runs.\n2. 02Check it Safety rules look for anything dangerous.\n3. 03Run or stop Safe: it runs $ npm test Dangerous: stopped $ DROP DATABASE prod; Claude Code asks you first. Cursor blocks it.\n\n↺ The result goes back to your agent.\n\nIf Antelog ever fails, it blocks the action. It never lets it through.\n\nThe problem\n\n## Nothing checks your agent *before* it acts.\n\nAI agents guess, and sometimes they guess wrong. Asking them to be careful isn’t enough.\n\nWhat’s at risk\n\n- Production databases\n- Cloud accounts\n- Shared git branches\n\nExample\n\nStopped: Claude Code asks you to allow or decline it. Cursor blocks it.\n\nExample: Based on the PocketOS incident of April 2026. You ask the agent to fix a credential error in staging. The agent tries to delete a storage volume, which would delete your production database and its backups. Antelog stops it and asks you. The agent then fixes the wrong setting in staging only, which Antelog allows because it deletes nothing.\n\nStopped: Claude Code asks you to allow or decline it. Cursor blocks it.\n\nExample: You ask the agent to delete test users. The agent tries DELETE FROM users with no filter, which would delete every user. Antelog stops it and asks you. The agent then deletes only users with test email addresses, which Antelog allows.\n\nStopped: Claude Code asks you to allow or decline it. Cursor blocks it.\n\nExample: You ask the agent why login is failing. The agent tries to print your .env file, which would put your passwords and API keys into the chat. Antelog stops it and asks you. The agent then reads the example settings file, which has no real secrets, and Antelog allows it.\n\nWhy Antelog\n\n## Why use *Antelog*\n\n<50ms\n\nPer check\n\nYour agent doesn’t slow down.\n\nCustom\n\nAdd your own rules\n\nOne line stops any command you choose.\n\n```\n# ~/.antelog/rules.txt\n+ terraform destroy\n```\n\n- 19 built-in safety rules [View rules](https://antelog.dev/docs#rules) \n- Installs in 1 minute [Install](#install) \n- Runs on your computer; only unknown commands get a cloud AI check\n- Every decision logged, see why anything was stopped\n\nInstall\n\n## Running in 1 minute.\n\nPick your agent. Three commands, no account.\n\n1. 1### Install Also adds the Claude Code plugin. Then restart open Claude Code sessions: they aren’t protected until you do.`$ curl -fsSL https://github.com/YashSarwaiya/antelog-releases/releases/latest/download/install.sh | sh`\n2. 2### Check it works Also lists open sessions that still need a restart.`$ antelog doctor`\n3. 3### See what was blocked`$ antelog blocked`\n\n1. 1### Install`$ curl -fsSL https://github.com/YashSarwaiya/antelog-releases/releases/latest/download/install.sh | sh`\n2. 2### Connect Cursor Then restart Cursor so it loads the hooks.`$ antelog setup cursor`\n3. 3### Check it works`$ antelog doctor`\n\nPricing\n\n## Safety is free. Pay for fewer interruptions and team controls.\n\n### Free\n\n$0\n\nFree forever. Runs on your computer. Blocks just as reliably as Pro.\n\n- Stops dangerous commands, on your laptop and in production\n- Online dashboard\n- 1,000 AI checks a month per machine\n- 14-day online history\n\n[Preview the dashboard →](https://antelog.dev/dashboard)\n\n### Pro\n\n$25/ month\n\nOr $199 a year. For one person who wants more.\n\n- Everything in Free\n- 10,000 AI checks a month\n- 90-day online history\n- Slack and email alerts\n\n[Start 14-day free trial](https://app.antelog.dev/login?next=/settings)\n\nCard needed. Cancel before day 15 and pay nothing.\n\n### Team / Enterprise\n\nCustom\n\nFor companies.\n\n- Everything in Pro\n- AI checks: any amount\n- More people, shared rules, audit log\n- Custom online history\n- Single sign-on and your own servers (ask us)\n\nFAQ\n\n## Questions, answered plainly.\n\n## How do I stop Claude Code or Cursor from running dangerous commands?\n\nInstall Antelog. It checks every command your agent wants to run before it runs, and stops destructive ones like rm -rf on your home folder, DROP TABLE, force-pushing to main, deleting cloud databases, and reading .env files. Install is one command and needs no account.\n\n## Can it stop an AI agent from deleting my production database?\n\nYes. It stops DROP TABLE, DROP DATABASE, TRUNCATE, DELETE with no WHERE, dropdb, and deleting cloud databases and volumes through cloud command-line tools or APIs: the kind of action that wiped the PocketOS production database and its backups in April 2026.\n\n## What doesn’t it protect against?\n\nCommands you run yourself, other programs, and agents other than Claude Code, Cursor and Codex (unless they ask through antelog check). Through MCP servers it stops delete, reset and restore calls to database, cloud and git servers, and destructive SQL, but other MCP tools are only recorded. A harmful action that matches no rule is allowed, so add your own rules for anything specific to your setup.\n\n## Can my agent still delete test data?\n\nUsually yes. Dropping or emptying a local test, dev or scratch database is normal agent work, so the AI check lets it through. Destructive commands aimed at production are stopped and you decide; deleting cloud databases, volumes or backups is always stopped. When Antelog isn’t sure, it asks you instead of guessing.\n\n## Does it slow my agent down?\n\nRule checks run on your computer and add milliseconds. Commands no rule knows get an AI check, which usually adds about a second. You can turn it off.\n\n## Does Antelog block commands or ask me?\n\nIn Claude Code it stops a flagged command and asks you to allow or decline it, so you stay in control. In Cursor, and when nobody is there to answer (for example claude -p), it blocks it. If Antelog itself fails, the action is always blocked.\n\n## What happens if Antelog breaks?\n\nThe action is blocked. Your agent waits instead of running unchecked.\n\n## Can the agent turn it off?\n\nNo. The agent can’t change Antelog’s settings, delete its record, stop it, or uninstall it. You still can.\n\n## Is my data sent anywhere?\n\nOnly for the free AI check: a command that changes something and that no rule recognizes, plus the text of any script it runs, with passwords and keys removed, goes to Antelog’s AI check server. The server answers yes or no and does not keep the command. Your log stays on your computer unless you connect it to your online dashboard. To turn the AI check off, write the word off into ~/.antelog/hosted-ai-check.\n\n## Which agents are supported?\n\nClaude Code, Cursor and Codex today, plus any agent of your own through one command (antelog check). More tools later.\n\n## Is it free?\n\nYes. Blocking is free and the same on every plan, on your laptop and in production. Pro ($25 a month or $199 a year) adds 10,000 AI checks a month, 90 days of history, and Slack and email alerts. Team adds more people, shared rules and an audit log.\n\n## Can I see the code?\n\nThe code isn’t public, but everything Antelog decides is on your computer: every action and every block is written to a tamper-evident log you can read with antelog log and antelog blocked.", "url": "https://wpnews.pro/news/antelog-stops-ai-coding-agents-from-running-dangerous-commands", "canonical_source": "https://antelog.dev/", "published_at": "2026-11-10 07:57:26+00:00", "updated_at": "2026-11-10 08:23:08.001701+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-tools", "developer-tools"], "entities": ["Antelog", "Claude Code", "Cursor", "YashSarwaiya", "PocketOS"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/antelog-stops-ai-coding-agents-from-running-dangerous-commands", "markdown": "https://wpnews.pro/news/antelog-stops-ai-coding-agents-from-running-dangerous-commands.md", "text": "https://wpnews.pro/news/antelog-stops-ai-coding-agents-from-running-dangerous-commands.txt", "jsonld": "https://wpnews.pro/news/antelog-stops-ai-coding-agents-from-running-dangerous-commands.jsonld"}}