Disable Claude Code from running git commit?

[mlevison]

Is there a way to disable Claude's ability to run git commit? In my settings.json I have:
"permissions": {
"deny": [
"Bash(git commit:*)",
"Bash(curl *)",
"Bash(wget *)",
"Bash(ssh *)",
"Bash(sudo *)"
],

If I used Claude Code without the /x commands, it obeys it's permissions. When the slash commands in this repo, Claude happily ignores the permissions.

Short of forking this repo and removing any use of git commands, is there a way to disable git usage from the commands you implemented?
(FWIW aside from this, the commnands have been very helpful in doing my hobbiest development.)

[PaulDuvall]

Thanks for the kind words, and good question!

The root cause: your deny pattern has a typo. There's a colon (:) after commit that prevents it from matching:

"Bash(git commit:*)"   // ← matches "git commit:something" (never happens)
"Bash(git commit*)"    // ← matches "git commit -m ..." (what you want)

Slash commands cannot bypass Claude Code's permission system. Permissions are enforced by the Claude Code harness at the tool-call level — before any command runs. A slash command is just a prompt; it can't override deny rules. The commands appeared to "ignore" permissions because the pattern wasn't matching the actual commands.

Recommended deny rules for blocking git write operations:

"deny": [
  "Bash(git commit*)",
  "Bash(git push*)",
  "Bash(git add*)",
  "Bash(git merge*)",
  "Bash(git rebase*)",
  "Bash(git reset*)",
  "Bash(curl *)",
  "Bash(wget *)",
  "Bash(ssh *)",
  "Bash(sudo *)"
]

This will block commits/pushes across all commands (including /xgit and /xcommit) while still allowing read-only git operations like git status, git log, git diff, and git branch.

If you apply these deny rules and /xgit tries to run git commit, Claude Code will block it and ask for approval — exactly the same as without slash commands.