ralphmode

SKILL.md

Configure Claude Code, Codex CLI, and Gemini CLI for reduced-approval Ralph automation while enforcing project boundaries and secret denylists.

Provides two preset permission profiles: repo-scoped (default, safer) and sandbox (full bypass for disposable environments only)

Implements dynamic safety checkpoints via platform-specific hooks that block Tier 1 dangerous operations (rm -rf, git reset --hard, .env access, sudo) at execution time

Supports Claude Code, Codex CLI, and Gemini CLI with auto-detection of git root and fallback inline configuration

Includes explicit deny rules for secrets and destructive commands alongside allow-listed automation patterns (npm, git, pytest, file operations)

Ralphmode

Ralphmode is a cross-platform permission profile for long-running ralph or jeo workflows.
It reduces approval friction, but it is not "allow everything everywhere."
The core rule is simple: widen automation only inside a bounded project or disposable sandbox, and keep secrets plus destructive commands explicitly blocked.

0. Agent Execution Protocol (execute immediately upon ralphmode keyword detection)

The following steps are commands, not descriptions. Execute them in order immediately when ralphmode is invoked. Do not skip steps.

STEP 0: Detect mode from user's message

Parse the user's invocation:

If the user says "sandbox", "yolo", "bypass all", "skip all", "disposable" → MODE=sandbox

Otherwise → MODE=repo (default, safer)

STEP 1: Run the setup script