Default to private when creating GitHub repositories

[fechirin-cyber]

Description

When Claude Code creates GitHub repositories (via gh repo create), it should default to private visibility. Currently, there is no built-in guardrail, and repos can be created as public without explicit user confirmation.

Problem

A user discovered that 6 of their 8 GitHub repositories were unintentionally public, potentially exposing source code, game assets, and project structure to the internet. While no API keys were committed in this case, the risk was real.

In agent-heavy workflows (where Claude orchestrates multiple subagents that handle git operations), the user has limited visibility into each gh repo create call. If any agent creates a repo without --private, sensitive code is silently exposed.

Proposal

1. Default to --private: When Claude Code runs gh repo create, it should always include the --private flag unless the user explicitly requests a public repository.
2. Warn before making public: If a user or instruction explicitly asks for a public repo, Claude should confirm with the user before proceeding, similar to how destructive operations (force push, etc.) require confirmation.
3. Warn on gh repo edit --visibility public: Same confirmation before changing an existing repo to public.

Rationale

• Making a repo public is a hard-to-reverse, externally-visible action — cached/cloned copies may persist even after switching back to private.
• Individual developers (hobbyists, indie game devs, etc.) often don't realize repos are public until it's too late.
• "Private by default" aligns with the principle of least privilege and Claude Code's existing caution around destructive/visible actions.

Environment

• Claude Code on Windows 10
• Multiple game projects managed via Agent tool subagents

[yurukusa]

This is exactly the kind of thing hooks are designed to catch. Here's a guard:

INPUT=$(cat)
COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
[ -z "$COMMAND" ] && exit 0
if echo "$COMMAND" | grep -qE 'gh repo create' && ! echo "$COMMAND" | grep -qE -- '--private'; then
  echo '{"decision":"ask","message":"⚠️ Creating a PUBLIC repository. This exposes your code to the internet. Add --private to keep it private. Proceed as public?"}'
  exit 0
fi
if echo "$COMMAND" | grep -qE 'gh repo edit.*--visibility public'; then
  echo '{"decision":"ask","message":"⚠️ Making repository PUBLIC. Cached/cloned copies may persist even if you revert. Are you sure?"}'
  exit 0
fi
exit 0

This catches both gh repo create without --private and gh repo edit --visibility public, forcing confirmation before any public exposure.

[github-actions]

Closing for now — inactive for too long. Please open a new issue if this is still relevant.

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.