runkids

Veto — DevOps skill for Claude Code

DevOps community

🔑 Human-in-the-loop confirmation for AI Agents.

How to install Veto

This entry records only its repository, not the path inside it, so there is no exact command to give. Open runkids/veto and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Veto does

🔑 Human-in-the-loop confirmation for AI Agents. Let your AI deploy, delete, push — with your fingerprint.

Alternatives in DevOps

Cloudflare Deploy — Deploy apps to Cloudflare using Workers, Pages, and platform services 14.6k ★
Ship Release — Systematic release workflow for RTK: build verification, version bump, changelog update, git tag, and push to 11.9k ★
Kubeshark — Cluster-wide network observability for Kubernetes 11.8k ★

README

veto

Human-in-the-loop confirmation for AI Agents

"I let my AI run terraform destroy.
Because I can stop it with one touch."

Veto Demo

npm install? **No.** yaml config? **No.** Just:

curl -fsSL https://raw.githubusercontent.com/runkids/veto/main/install.sh | bash
veto setup claude

Your AI now asks before it destroys.

Why

Your AI agent runs as *you*. It doesn't need `sudo` to `rm -rf ~/Documents`.

veto sits between your AI and the terminal. Dangerous command? Touch ID. Catastrophic command? Blocked. Safe command? Passes through silently.

It's a seatbelt — not a sandbox.

Touch ID · PIN · TOTP · Telegram

How does it work?

+-----------+     +-----------+     +-----------+
| AI Agent  |---->| veto gate |---->| Terminal  |
+-----------+     +-----+-----+     +-----------+
                        |
                  +-----v-----+
                  | Risk Check|
                  +-----+-----+
                        |
        +---------------+---------------+
        |               |               |
        v               v               v
   +--------+      +--------+      +--------+
   |  Low   |      |  High  |      |Critical|
   | [pass] |      |[auth]  |      |[bloc